Vulnerability-Lookup

RHSA-2026:99022

Vulnerability from csaf_redhat - Published: 2026-11-11 15:41 - Updated: 2026-11-13 20:55

Summary

Red Hat Security Advisory: Red Hat Quay - 3.16.7

Severity

Critical

Notes

Topic: Red Hat Quay v3.16.7

Details: Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.16.7. See the following Release Notes documentation for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_quay/3.16/html/red_hat_quay_release_notes/index

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-49825

A flaw was found in lxml, a library for processing XML and HTML in Python. The `lxml.html.defs.link_attrs` were missing `xlink:href`, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics (SVG) or Mathematical Markup Language (MathML), potentially leading to information disclosure or arbitrary code execution in the context of the user's browser.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

CWE-166 - Improper Handling of Missing Special Element

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x	—	Vendor Fix fix

Known not affected 27 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le		—
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64		—

Threats

Impact Important

CVE-2026-77403

A flaw was found in RabbitMQ amqp091-go, a Go AMQP 0.9.1 client. A malicious or compromised AMQP broker can exploit this by advertising an extremely small frame size during connection negotiation. This can lead to excessive fragmentation of client publications, consuming significant CPU resources and potentially causing a Denial of Service (DoS) by stalling the client or its host.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-839 - Numeric Range Comparison Without Minimum Check

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64	—	Vendor Fix fix Workaround

Known not affected 27 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x	—	Workaround

Threats

Impact Moderate

CVE-2026-77404

A flaw was found in RabbitMQ amqp091-go. The URI.String function in uri.go concatenates TLS asset path values directly into an AMQPS query string without proper encoding. If an application processes a TLS asset path containing special characters like ampersand or equals delimiters, these can be misinterpreted during URI re-parsing. This vulnerability could allow an attacker to overwrite connection options, potentially corrupting the connection configuration or selecting unintended local cryptographic assets, leading to a compromise of the TLS connection.

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 4 products, the same list as for CVE-2026-77403

Known not affected 27 products, the same list as for CVE-2026-77403

Threats

Impact Important

CVE-2026-77406

A flaw was found in RabbitMQ amqp091-go. The `Channel.Qos` function in `channel.go` incorrectly handles negative integer values for `prefetchCount` and `prefetchSize`, casting them to large unsigned integers. This allows an application that processes untrusted Quality of Service (QoS) configuration to request extremely high message prefetch limits. Consequently, a message broker can deliver a large volume of queued messages, leading to client memory exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 4 products, the same list as for CVE-2026-77403

Known not affected 27 products, the same list as for CVE-2026-77403

Threats

Impact Important

CVE-2026-77409

A flaw was found in RabbitMQ amqp091-go, a Go AMQP 0.9.1 client. When the client synchronously sends events to application-provided channels, an unbuffered or full listener channel can cause the client's reader to block. This blockage prevents the processing of critical messages and heartbeats, leading to connection stalls, deadlocks, and disconnections. This vulnerability can result in a Denial of Service (DoS) for applications using the affected component.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-77403

Known not affected 27 products, the same list as for CVE-2026-77403

Threats

Impact Important

CVE-2026-77410

A flaw was found in RabbitMQ amqp091-go. A malicious or compromised broker can send an extreme declared message body size to a client. This causes the client to attempt an excessively large memory allocation without proper size capping, leading to memory exhaustion and termination of the client process. This vulnerability results in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-77403

Known not affected 27 products, the same list as for CVE-2026-77403

Threats

Impact Important

CVE-2026-77412

A flaw was found in RabbitMQ amqp091-go. A malicious or compromised broker can send a specially crafted AMQP (Advanced Message Queuing Protocol) message with a malformed field length. This can cause an integer overflow, leading to a runtime panic in the client process. Consequently, the client process terminates, resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Fixed 4 products, the same list as for CVE-2026-77403

Known not affected 27 products, the same list as for CVE-2026-77403

Threats

Impact Important

CVE-2026-79921

A flaw was found in amqp091-go, a Go AMQP 0.9.1 client. A malicious AMQP broker could exploit this by sending oversized data frames, forcing the client to allocate excessive memory. This can lead to unexpected memory consumption and potentially cause the application to become unavailable, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-77403

Known not affected 27 products, the same list as for CVE-2026-77403

Threats

Impact Important

CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-93749

A flaw was found in source-map-js. This vulnerability allows a remote attacker to trigger a denial of service by providing malformed input. Specifically, by supplying extremely large offset line values in indexed source maps, the attacker can cause the service's event loop to block, making it unable to process further requests.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-94603

A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a user to run a specially crafted image, leading to a container sandbox bypass and potential execution with elevated system privileges.

8.6 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-15 - External Control of System or Configuration Setting

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64	—	Vendor Fix fix Workaround

Known not affected 27 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64	—	Workaround
Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x	—	Workaround

Threats

Impact Important

CVE-2026-97687

A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy's TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-97689

A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102267

A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102268

A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Critical

CVE-2026-102272

A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102273

A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102994

A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102996

A flaw was found in pypdf. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted PDF document with an oversized font character width array. When processing the document during operations such as text extraction, the library allocates excessive memory, leading to resource exhaustion and potential application failure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102997

A flaw was found in pypdf. A remote attacker can exploit this vulnerability by providing a crafted PDF document containing a partially malformed FlateDecode data compression stream. When processing the malformed stream, the application triggers an inefficient recovery routine that consumes excessive processing time, potentially resulting in application unresponsiveness and a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102998

A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-102999

A flaw was found in pypdf. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted PDF document containing a large number of embedded files. When an application accesses the attachment mapping, the library repeatedly reparses the entire attachment list for each lookup. This repetitive processing consumes excessive computational resources, leading to severe performance degradation and unresponsiveness.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-103000

A flaw was found in pypdf. By supplying a specially crafted PDF file containing unusually large alphabetical page-label values, a remote attacker can trigger excessive memory allocation when an application retrieves document page labels. This uncontrolled memory consumption can cause the application to crash or become unresponsive, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-110642

A flaw was found in xhtml2pdf. This vulnerability allows an attacker to execute arbitrary commands by convincing a user to process a file with a specially crafted name while using the viewer option. Because the software fails to properly sanitize the file name before passing it to the operating system, the injected commands run with the permissions of the user executing the tool.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-110697

A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Critical

CVE-2026-112390

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying a specially crafted Microsoft Image Composer (MIC) file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infinite loop. This non-advancing loop consumes excessive CPU resources and can hang application worker processes indefinitely.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-118669

A flaw was found in oauthlib. In certain token grant flows, the authorization system can authenticate an incoming client while retaining a different, client-supplied identifier for permission and scope validation. A remote, authenticated attacker with lower privileges can exploit this inconsistency by submitting another client's identifier during token requests. This flaw leads to privilege escalation, potentially allowing the attacker to obtain access tokens with unauthorized permissions and scopes associated with another client.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Important

CVE-2026-123710

A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 4 products, the same list as for CVE-2026-49825

Known not affected 27 products, the same list as for CVE-2026-49825

Threats

Impact Critical

References

232 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:99022	self
https://access.redhat.com/security/cve/CVE-2026-102267	external
https://access.redhat.com/security/cve/CVE-2026-102268	external
https://access.redhat.com/security/cve/CVE-2026-102272	external
https://access.redhat.com/security/cve/CVE-2026-102273	external
https://access.redhat.com/security/cve/CVE-2026-102994	external
https://access.redhat.com/security/cve/CVE-2026-102996	external
https://access.redhat.com/security/cve/CVE-2026-102997	external
https://access.redhat.com/security/cve/CVE-2026-102998	external
https://access.redhat.com/security/cve/CVE-2026-102999	external
https://access.redhat.com/security/cve/CVE-2026-103000	external
https://access.redhat.com/security/cve/CVE-2026-110642	external
https://access.redhat.com/security/cve/CVE-2026-110697	external
https://access.redhat.com/security/cve/CVE-2026-112390	external
https://access.redhat.com/security/cve/CVE-2026-118669	external
https://access.redhat.com/security/cve/CVE-2026-123710	external
https://access.redhat.com/security/cve/CVE-2026-49825	external
https://access.redhat.com/security/cve/CVE-2026-77403	external
https://access.redhat.com/security/cve/CVE-2026-77404	external
https://access.redhat.com/security/cve/CVE-2026-77406	external
https://access.redhat.com/security/cve/CVE-2026-77409	external
https://access.redhat.com/security/cve/CVE-2026-77410	external
https://access.redhat.com/security/cve/CVE-2026-77412	external
https://access.redhat.com/security/cve/CVE-2026-79921	external
https://access.redhat.com/security/cve/CVE-2026-84292	external
https://access.redhat.com/security/cve/CVE-2026-84394	external
https://access.redhat.com/security/cve/CVE-2026-93749	external
https://access.redhat.com/security/cve/CVE-2026-94603	external
https://access.redhat.com/security/cve/CVE-2026-97687	external
https://access.redhat.com/security/cve/CVE-2026-97689	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-49825	self
https://bugzilla.redhat.com/show_bug.cgi?id=2520368	external
https://www.cve.org/CVERecord?id=CVE-2026-49825	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49825	external
https://github.com/fedora-python/lxml_html_clean/…	external
https://github.com/fedora-python/lxml_html_clean/…	external
https://github.com/fedora-python/lxml_html_clean/…	external
https://github.com/lxml/lxml/commit/5927a6d5e8518…	external
https://github.com/lxml/lxml/releases/tag/lxml-6.1.1	external
https://access.redhat.com/security/cve/CVE-2026-77403	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535498	external
https://www.cve.org/CVERecord?id=CVE-2026-77403	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77403	external
https://github.com/rabbitmq/amqp091-go/commit/2e0…	external
https://github.com/rabbitmq/amqp091-go/pull/353	external
https://github.com/rabbitmq/amqp091-go/releases/t…	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-77404	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535489	external
https://www.cve.org/CVERecord?id=CVE-2026-77404	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77404	external
https://github.com/rabbitmq/amqp091-go/commit/743…	external
https://github.com/rabbitmq/amqp091-go/pull/352	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-77406	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535493	external
https://www.cve.org/CVERecord?id=CVE-2026-77406	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77406	external
https://github.com/rabbitmq/amqp091-go/commit/3b8…	external
https://github.com/rabbitmq/amqp091-go/pull/351	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-77409	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535494	external
https://www.cve.org/CVERecord?id=CVE-2026-77409	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77409	external
https://github.com/rabbitmq/amqp091-go/commit/5b0…	external
https://github.com/rabbitmq/amqp091-go/pull/349	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-77410	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535500	external
https://www.cve.org/CVERecord?id=CVE-2026-77410	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77410	external
https://github.com/rabbitmq/amqp091-go/commit/91b…	external
https://github.com/rabbitmq/amqp091-go/pull/346	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-77412	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535499	external
https://www.cve.org/CVERecord?id=CVE-2026-77412	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77412	external
https://github.com/rabbitmq/amqp091-go/commit/669…	external
https://github.com/rabbitmq/amqp091-go/pull/344	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-79921	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524713	external
https://www.cve.org/CVERecord?id=CVE-2026-79921	external
https://nvd.nist.gov/vuln/detail/CVE-2026-79921	external
https://github.com/rabbitmq/amqp091-go/commit/6be…	external
https://github.com/rabbitmq/amqp091-go/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-84292	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747	external
https://www.cve.org/CVERecord?id=CVE-2026-84292	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-84394	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756	external
https://www.cve.org/CVERecord?id=CVE-2026-84394	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-93749	self
https://bugzilla.redhat.com/show_bug.cgi?id=2538368	external
https://www.cve.org/CVERecord?id=CVE-2026-93749	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93749	external
https://github.com/7rulnik/source-map-js	external
https://github.com/7rulnik/source-map-js/blob/c1c…	external
https://github.com/7rulnik/source-map-js/issues/76	external
https://www.vulncheck.com/advisories/source-map-j…	external
https://access.redhat.com/security/cve/CVE-2026-94603	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542566	external
https://www.cve.org/CVERecord?id=CVE-2026-94603	external
https://nvd.nist.gov/vuln/detail/CVE-2026-94603	external
https://access.redhat.com/security/cve/CVE-2026-97687	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543255	external
https://www.cve.org/CVERecord?id=CVE-2026-97687	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97687	external
https://github.com/urllib3/urllib3/commit/07408ce…	external
https://github.com/urllib3/urllib3/commit/b644729…	external
https://github.com/urllib3/urllib3/pull/5093	external
https://github.com/urllib3/urllib3/releases/tag/2.8.0	external
https://github.com/urllib3/urllib3/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-97689	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543245	external
https://www.cve.org/CVERecord?id=CVE-2026-97689	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97689	external
https://github.com/urllib3/urllib3/commit/cd770b0…	external
https://github.com/urllib3/urllib3/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-102267	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542690	external
https://www.cve.org/CVERecord?id=CVE-2026-102267	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102267	external
https://github.com/jpadilla/pyjwt/commit/0a795b8e…	external
https://github.com/jpadilla/pyjwt/releases/tag/2.14.0	external
https://github.com/jpadilla/pyjwt/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-102268	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542685	external
https://www.cve.org/CVERecord?id=CVE-2026-102268	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102268	external
https://github.com/jpadilla/pyjwt/commit/8b4e233a…	external
https://github.com/jpadilla/pyjwt/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-102272	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542695	external
https://www.cve.org/CVERecord?id=CVE-2026-102272	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102272	external
https://github.com/jpadilla/pyjwt/commit/18078393…	external
https://github.com/jpadilla/pyjwt/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-102273	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542697	external
https://www.cve.org/CVERecord?id=CVE-2026-102273	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102273	external
https://github.com/jpadilla/pyjwt/commit/801cd128…	external
https://github.com/jpadilla/pyjwt/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-102994	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544270	external
https://www.cve.org/CVERecord?id=CVE-2026-102994	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102994	external
https://github.com/py-pdf/pypdf/commit/82501d2993…	external
https://github.com/py-pdf/pypdf/pull/4055	external
https://github.com/py-pdf/pypdf/releases/tag/6.18.0	external
https://github.com/py-pdf/pypdf/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-102996	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544277	external
https://www.cve.org/CVERecord?id=CVE-2026-102996	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102996	external
https://github.com/py-pdf/pypdf/commit/0fb26eb8cd…	external
https://github.com/py-pdf/pypdf/pull/4072	external
https://github.com/py-pdf/pypdf/releases/tag/6.18.1	external
https://github.com/py-pdf/pypdf/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-102997	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544294	external
https://www.cve.org/CVERecord?id=CVE-2026-102997	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102997	external
https://github.com/py-pdf/pypdf/commit/d9d38cf99b…	external
https://github.com/py-pdf/pypdf/pull/4073	external
https://github.com/py-pdf/pypdf/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-102998	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544283	external
https://www.cve.org/CVERecord?id=CVE-2026-102998	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102998	external
https://github.com/py-pdf/pypdf/commit/959467a9b9…	external
https://github.com/py-pdf/pypdf/pull/4087	external
https://github.com/py-pdf/pypdf/releases/tag/6.19.0	external
https://github.com/py-pdf/pypdf/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-102999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544307	external
https://www.cve.org/CVERecord?id=CVE-2026-102999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102999	external
https://github.com/py-pdf/pypdf/commit/6b10556d13…	external
https://github.com/py-pdf/pypdf/pull/4081	external
https://github.com/py-pdf/pypdf/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-103000	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544308	external
https://www.cve.org/CVERecord?id=CVE-2026-103000	external
https://nvd.nist.gov/vuln/detail/CVE-2026-103000	external
https://github.com/py-pdf/pypdf/commit/0d8b5a8832…	external
https://github.com/py-pdf/pypdf/pull/4096	external
https://github.com/py-pdf/pypdf/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-110642	self
https://bugzilla.redhat.com/show_bug.cgi?id=2552249	external
https://www.cve.org/CVERecord?id=CVE-2026-110642	external
https://nvd.nist.gov/vuln/detail/CVE-2026-110642	external
https://github.com/xhtml2pdf/xhtml2pdf/blob/v0.2.…	external
https://github.com/xhtml2pdf/xhtml2pdf/commit/f86…	external
https://github.com/xhtml2pdf/xhtml2pdf/pull/835	external
https://github.com/xhtml2pdf/xhtml2pdf/releases/t…	external
https://www.vulncheck.com/advisories/xhtml2pdf-be…	external
https://access.redhat.com/security/cve/CVE-2026-110697	self
https://bugzilla.redhat.com/show_bug.cgi?id=2552237	external
https://www.cve.org/CVERecord?id=CVE-2026-110697	external
https://nvd.nist.gov/vuln/detail/CVE-2026-110697	external
https://access.redhat.com/solutions/7149592	external
https://access.redhat.com/security/cve/CVE-2026-112390	self
https://bugzilla.redhat.com/show_bug.cgi?id=2555848	external
https://www.cve.org/CVERecord?id=CVE-2026-112390	external
https://nvd.nist.gov/vuln/detail/CVE-2026-112390	external
https://github.com/python-pillow/Pillow/commit/26…	external
https://github.com/python-pillow/Pillow/releases/…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-118669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2563201	external
https://www.cve.org/CVERecord?id=CVE-2026-118669	external
https://nvd.nist.gov/vuln/detail/CVE-2026-118669	external
https://github.com/oauthlib/oauthlib/commit/c951a…	external
https://github.com/oauthlib/oauthlib/pull/920	external
https://github.com/oauthlib/oauthlib/releases/tag…	external
https://github.com/oauthlib/oauthlib/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-123710	self
https://bugzilla.redhat.com/show_bug.cgi?id=2568072	external
https://www.cve.org/CVERecord?id=CVE-2026-123710	external
https://nvd.nist.gov/vuln/detail/CVE-2026-123710	external
https://access.redhat.com/solutions/7149923	external

Acknowledgments

Red Hat Dave O'Connor

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay v3.16.7",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Quay is a container image registry for building, distributing, and deploying containers.\n\nThis advisory contains the container images for Red Hat Quay 3.16.7. See the following Release Notes documentation for additional details about this release:\n\nhttps://docs.redhat.com/en/documentation/red_hat_quay/3.16/html/red_hat_quay_release_notes/index",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:99022",
        "url": "https://access.redhat.com/errata/RHSA-2026:99022"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102267",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102267"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102268",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102268"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102272",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102272"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102273"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102994",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102994"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102996",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102996"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102997",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102997"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102998",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102998"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102999",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102999"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-103000",
        "url": "https://access.redhat.com/security/cve/CVE-2026-103000"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-110642",
        "url": "https://access.redhat.com/security/cve/CVE-2026-110642"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-110697",
        "url": "https://access.redhat.com/security/cve/CVE-2026-110697"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-112390",
        "url": "https://access.redhat.com/security/cve/CVE-2026-112390"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-118669",
        "url": "https://access.redhat.com/security/cve/CVE-2026-118669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-123710",
        "url": "https://access.redhat.com/security/cve/CVE-2026-123710"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49825",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49825"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77403",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77403"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77404",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77404"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77406",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77406"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77409",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77409"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77410",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77410"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77412",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77412"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-79921",
        "url": "https://access.redhat.com/security/cve/CVE-2026-79921"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93749",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93749"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-94603",
        "url": "https://access.redhat.com/security/cve/CVE-2026-94603"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97687",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97687"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97689",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97689"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99022.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay - 3.16.7",
    "tracking": {
      "current_release_date": "2026-11-13T20:55:11+00:00",
      "generator": {
        "date": "2026-11-13T20:55:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.6"
        }
      },
      "id": "RHSA-2026:99022",
      "initial_release_date": "2026-11-11T15:41:31+00:00",
      "revision_history": [
        {
          "date": "2026-11-11T15:41:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-12T18:12:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-13T20:55:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.16",
                "product": {
                  "name": "Red Hat Quay 3.16",
                  "product_id": "Red Hat Quay 3.16",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.16::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3Af2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1793808083"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Abdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1793810161"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1793004002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Ad31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1793005188"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3Ad17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1793117209"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793808586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1793131052"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9-operator@sha256%3Afd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1793808051"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1794005335"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1793993799"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1793808083"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3Ae25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1793004002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3Ad6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1793117209"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793808586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Add897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1793131052"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9-operator@sha256%3Ad821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1793808051"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1793993799"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1793808083"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1793004002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3Ad52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1793117209"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793808586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Aa39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1793131052"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9-operator@sha256%3Af3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1793808051"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1793993799"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1793808083"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3Afe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1793004002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1793117209"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ae9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793808586"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1793131052"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9-operator@sha256%3Ac08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1793808051"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3Aad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1793993799"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64 as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x as a component of Red Hat Quay 3.16",
          "product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.16"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-49825",
      "cwe": {
        "id": "CWE-166",
        "name": "Improper Handling of Missing Special Element"
      },
      "discovery_date": "2026-08-20T15:01:41.793678+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520368"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in lxml, a library for processing XML and HTML in Python. The `lxml.html.defs.link_attrs` were missing `xlink:href`, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics (SVG) or Mathematical Markup Language (MathML), potentially leading to information disclosure or arbitrary code execution in the context of the user\u0027s browser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity for Red Hat products because an unauthenticated remote attacker could inject malicious script schemes into rendered markup, resulting in cross-site scripting and potential session hijacking in the victim\u0027s browser. Exploitation requires an application to process untrusted user input using the HTML cleaner utility configured with non-default, relaxed attribute filtering. Under default library configurations where strict attribute allowlists are enforced, the relevant hyperlink attributes are stripped automatically before link scheme validation occurs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49825"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520368",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520368"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49825",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49825"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49825",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49825"
        },
        {
          "category": "external",
          "summary": "https://github.com/fedora-python/lxml_html_clean/commit/322357ac61c6cf80fcbaba53b4e92e31f3ded9f2",
          "url": "https://github.com/fedora-python/lxml_html_clean/commit/322357ac61c6cf80fcbaba53b4e92e31f3ded9f2"
        },
        {
          "category": "external",
          "summary": "https://github.com/fedora-python/lxml_html_clean/releases/tag/0.4.5",
          "url": "https://github.com/fedora-python/lxml_html_clean/releases/tag/0.4.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f",
          "url": "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f"
        },
        {
          "category": "external",
          "summary": "https://github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0",
          "url": "https://github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0"
        },
        {
          "category": "external",
          "summary": "https://github.com/lxml/lxml/releases/tag/lxml-6.1.1",
          "url": "https://github.com/lxml/lxml/releases/tag/lxml-6.1.1"
        }
      ],
      "release_date": "2026-08-20T14:42:30.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href"
    },
    {
      "cve": "CVE-2026-77403",
      "cwe": {
        "id": "CWE-839",
        "name": "Numeric Range Comparison Without Minimum Check"
      },
      "discovery_date": "2026-09-16T14:53:45.086464+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535498"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go, a Go AMQP 0.9.1 client. A malicious or compromised AMQP broker can exploit this by advertising an extremely small frame size during connection negotiation. This can lead to excessive fragmentation of client publications, consuming significant CPU resources and potentially causing a Denial of Service (DoS) by stalling the client or its host.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via AMQP frame size negotiation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having Moderate impact for Red Hat environments because successful exploitation requires connecting to an untrusted or compromised AMQP broker, which is an uncommon prerequisite in standard managed cluster deployments. Red Hat services and operators utilizing this Go client typically communicate exclusively with trusted, internally administered message queues over secure channels. While an adversary controlling a broker endpoint could force excessive message packetization leading to resource exhaustion, confidentiality and integrity remain unimpacted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77403"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535498",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535498"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77403",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77403"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77403",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77403"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/2e0a919b89f337dbf58db2bb34ab206dac354a06",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/2e0a919b89f337dbf58db2bb34ab206dac354a06"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/353",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/353"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-xwwf-m8fg-p9q2",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-xwwf-m8fg-p9q2"
        }
      ],
      "release_date": "2026-09-16T14:36:19.270000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that applications using the RabbitMQ amqp091-go client only connect to trusted AMQP brokers. Restrict network access for clients to only communicate with known, secure broker instances. This reduces the risk of a malicious or compromised broker exploiting the client\u0027s vulnerability during frame size negotiation.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via AMQP frame size negotiation"
    },
    {
      "cve": "CVE-2026-77404",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-09-16T14:51:56.561147+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535489"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go. The URI.String function in uri.go concatenates TLS asset path values directly into an AMQPS query string without proper encoding. If an application processes a TLS asset path containing special characters like ampersand or equals delimiters, these can be misinterpreted during URI re-parsing. This vulnerability could allow an attacker to overwrite connection options, potentially corrupting the connection configuration or selecting unintended local cryptographic assets, leading to a compromise of the TLS connection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Connection configuration overwrite via unsanitized TLS path parameter injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact because applications in Red Hat products that use amqp091-go and accept attacker-controlled TLS asset paths can be induced to reparse a crafted AMQPS URI. A local attacker with partial control of a certificate, key, CA, or server-name path or related environment setting can inject query parameters and alter connection configuration, potentially selecting unintended local TLS material or causing connection failures.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77404"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535489",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535489"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77404",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77404"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77404",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77404"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/743d488e46955fe7ffc55506fe2c401d01216783",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/743d488e46955fe7ffc55506fe2c401d01216783"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/352",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/352"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-465g-fh3v-9jw4",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-465g-fh3v-9jw4"
        }
      ],
      "release_date": "2026-09-16T14:40:49.895000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Avoid accepting untrusted values for TLS certificate, key, CA, or server-name paths. Restrict write access to directories and environment settings used to configure those paths, and upgrade applications using amqp091-go to version 1.13.0 or later when available.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Connection configuration overwrite via unsanitized TLS path parameter injection"
    },
    {
      "cve": "CVE-2026-77406",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-09-16T14:52:23.520218+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go. The `Channel.Qos` function in `channel.go` incorrectly handles negative integer values for `prefetchCount` and `prefetchSize`, casting them to large unsigned integers. This allows an application that processes untrusted Quality of Service (QoS) configuration to request extremely high message prefetch limits. Consequently, a message broker can deliver a large volume of queued messages, leading to client memory exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via signed-to-unsigned integer casting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact because applications using amqp091-go can be disrupted if untrusted QoS configuration supplies negative prefetch values. Those values can be converted to extremely large message limits, allowing excessive message delivery and memory exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77406"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77406",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77406"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77406",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77406"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/3b879e1d1d25b544e26b3bc3d7db3213203c0f3b",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/3b879e1d1d25b544e26b3bc3d7db3213203c0f3b"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/351",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/351"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-rm6m-hrcw-jw33",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-rm6m-hrcw-jw33"
        }
      ],
      "release_date": "2026-09-16T14:37:36.550000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Do not allow untrusted users to control AMQP QoS prefetch settings. Validate configured values are non-negative, and update applications using amqp091-go when a fixed version is available.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via signed-to-unsigned integer casting"
    },
    {
      "cve": "CVE-2026-77409",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-16T14:52:41.339550+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535494"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go, a Go AMQP 0.9.1 client. When the client synchronously sends events to application-provided channels, an unbuffered or full listener channel can cause the client\u0027s reader to block. This blockage prevents the processing of critical messages and heartbeats, leading to connection stalls, deadlocks, and disconnections. This vulnerability can result in a Denial of Service (DoS) for applications using the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service due to synchronous event channel blocking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact because a broker-driven event burst can block AMQP client processing when application notification channels are unbuffered, full, or not promptly drained. The resulting stall can cause missed heartbeats, deadlocks, or client disconnection.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77409"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535494",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535494"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77409",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77409"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77409",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77409"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/5b0ccbb8d7bc3dfa18129d9b0f9256d656809494",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/5b0ccbb8d7bc3dfa18129d9b0f9256d656809494"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/349",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/349"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-wxx3-cj7g-w73j",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-wxx3-cj7g-w73j"
        }
      ],
      "release_date": "2026-09-16T14:48:00.669000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Use adequately buffered notification channels and ensure event consumers continuously drain them. Update applications using amqp091-go when a fixed version is available.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service due to synchronous event channel blocking"
    },
    {
      "cve": "CVE-2026-77410",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-16T14:54:20.609828+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535500"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go. A malicious or compromised broker can send an extreme declared message body size to a client. This causes the client to attempt an excessively large memory allocation without proper size capping, leading to memory exhaustion and termination of the client process. This vulnerability results in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via unbounded body buffer allocation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having an Important severity for Red Hat products because an untrusted or rogue messaging broker can remotely force client services into an out-of-memory crash, resulting in a denial of service without requiring client-side privileges. In typical Red Hat deployments, AMQP clients connect exclusively to managed and authenticated messaging infrastructure within trusted internal networks, significantly reducing exposure to rogue brokers. While the issue results in immediate process termination for the consuming application, it does not permit arbitrary code execution or data leakage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77410"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535500",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535500"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77410",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77410"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77410",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77410"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/91b65fa0096a99a580cf51a31b24028ff1c60382",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/91b65fa0096a99a580cf51a31b24028ff1c60382"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/346",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/346"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-r9c8-gcjp-xfwh",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-r9c8-gcjp-xfwh"
        }
      ],
      "release_date": "2026-09-16T14:39:08.872000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via unbounded body buffer allocation"
    },
    {
      "cve": "CVE-2026-77412",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "discovery_date": "2026-09-16T14:54:07.329706+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535499"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go. A malicious or compromised broker can send a specially crafted AMQP (Advanced Message Queuing Protocol) message with a malformed field length. This can cause an integer overflow, leading to a runtime panic in the client process. Consequently, the client process terminates, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via Malicious AMQP Field Length",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact because a malicious or compromised AMQP broker can send a malformed field length that causes the client process to panic and terminate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77412"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535499",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535499"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77412",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77412"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77412",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77412"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/669b42bf7b1db76bc6d4973e3634247f680accbf",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/669b42bf7b1db76bc6d4973e3634247f680accbf"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/344",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/344"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-4v58-74mf-rjx3",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-4v58-74mf-rjx3"
        }
      ],
      "release_date": "2026-09-16T14:43:46.302000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Connect only to trusted AMQP brokers, protect broker credentials and transport security, and update applications using amqp091-go when a fixed version is available.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service via Malicious AMQP Field Length"
    },
    {
      "cve": "CVE-2026-79921",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-26T21:01:49.454950+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524713"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in amqp091-go, a Go AMQP 0.9.1 client. A malicious AMQP broker could exploit this by sending oversized data frames, forcing the client to allocate excessive memory. This can lead to unexpected memory consumption and potentially cause the application to become unavailable, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the amqp091-go client can lead to a denial of service in Red Hat products. A compromised or malicious AMQP broker could exploit this by sending oversized payloads, forcing the client to consume excessive memory and potentially causing application-layer service disruption. The impact is considered Important due to the potential for resource exhaustion and disruption of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-79921"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524713",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524713"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-79921",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79921"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-79921",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79921"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/353",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/353"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp"
        }
      ],
      "release_date": "2026-08-26T20:24:58.115000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads"
    },
    {
      "cve": "CVE-2026-84292",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-09-02T20:21:15.599288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527747"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. Applications utilizing the `fast-uri` library in Red Hat environments are susceptible to authority injection if they process untrusted data as the port component of a URI. This could allow an attacker to redirect network traffic to an arbitrary host, compromising communication integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
        }
      ],
      "release_date": "2026-09-02T20:09:51.415000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
    },
    {
      "cve": "CVE-2026-84394",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-09-02T20:31:21.036047+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can exploit URI parsing discrepancies to bypass critical host-level access restrictions, such as SSRF filters or reverse proxy routing, without needing elevated privileges. Within Red Hat environments, the issue primarily impacts services that rely on fast-uri to validate external destinations before dispatching requests via Node.js HTTP clients. Product components that only provide frontend interfaces or do not evaluate host security policies using the parsed authority data are not exposed to security filter circumvention.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
        }
      ],
      "release_date": "2026-09-02T20:25:35.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
    },
    {
      "cve": "CVE-2026-93749",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-09-22T18:17:34.349880+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2538368"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in source-map-js. This vulnerability allows a remote attacker to trigger a denial of service by providing malformed input. Specifically, by supplying extremely large offset line values in indexed source maps, the attacker can cause the service\u0027s event loop to block, making it unable to process further requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "source-map-js: source-map-js: Denial of Service via malformed indexed source maps",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because an unauthenticated remote attacker can supply crafted data that synchronously blocks the single-threaded event loop, resulting in a sustained denial of service for affected services. In standard Red Hat application environments, source map parsing utilities are predominantly utilized in build systems or developer tooling rather than production-facing services, which limits general exposure. However, server-side applications accepting and processing untrusted source maps from external clients are directly susceptible to availability disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93749"
        },
        {
          "category": "external",
          "summary": "RHBZ#2538368",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538368"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93749",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93749"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93749",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93749"
        },
        {
          "category": "external",
          "summary": "https://github.com/7rulnik/source-map-js",
          "url": "https://github.com/7rulnik/source-map-js"
        },
        {
          "category": "external",
          "summary": "https://github.com/7rulnik/source-map-js/blob/c1cd8904bb7bd0c7fb5879fcda48134d82a27934/lib/source-node.js#L115-L118",
          "url": "https://github.com/7rulnik/source-map-js/blob/c1cd8904bb7bd0c7fb5879fcda48134d82a27934/lib/source-node.js#L115-L118"
        },
        {
          "category": "external",
          "summary": "https://github.com/7rulnik/source-map-js/issues/76",
          "url": "https://github.com/7rulnik/source-map-js/issues/76"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/source-map-js-through-1.2.1-event-loop-denial-of-service",
          "url": "https://www.vulncheck.com/advisories/source-map-js-through-1.2.1-event-loop-denial-of-service"
        }
      ],
      "release_date": "2026-09-18T17:51:34.972000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "source-map-js: source-map-js: Denial of Service via malformed indexed source maps"
    },
    {
      "cve": "CVE-2026-94603",
      "cwe": {
        "id": "CWE-15",
        "name": "External Control of System or Configuration Setting"
      },
      "discovery_date": "2026-09-28T15:59:21.039000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542566"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a user to run a specially crafted image, leading to a container sandbox bypass and potential execution with elevated system privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having an Important severity impact for Red Hat environments because running a malicious image can completely circumvent expected confinement boundaries and grant unexpected privileges to a container, compromising host integrity. Under default configurations, container execution relies on enforced sandboxing limits and security flags supplied by the operator. However, if an image embeds specific checkpoint metadata, the runtime automatically prioritizes the checkpoint configuration over explicit command-line restrictions, silently omitting requested security controls. Exploitation requires an operator or automated workflow to launch an untrusted image; environments that execute only vetted container workloads from trusted registries remain at reduced operational risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-94603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542566",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542566"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-94603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-94603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-94603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94603"
        }
      ],
      "release_date": "2026-09-29T15:47:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation"
    },
    {
      "cve": "CVE-2026-97687",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-09-29T15:44:25.449046+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543255"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy\u0027s TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has evaluated this vulnerability as having an Important impact because a network attacker can exploit corrupted TLS validation states to impersonate an HTTPS proxy, enabling complete interception and manipulation of sensitive communications as well as client credential theft. Successful exploitation depends on specialized application architectures where outgoing requests utilize an HTTPS-capable proxy alongside customized destination TLS parameters that inadvertently override proxy verification. Default Red Hat enterprise deployments that communicate directly with endpoints, utilize traditional HTTP proxies, or rely on standard CONNECT tunneling for end-to-end encryption do not expose this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97687"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543255",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543255"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97687",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465",
          "url": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3",
          "url": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/pull/5093",
          "url": "https://github.com/urllib3/urllib3/pull/5093"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
          "url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"
        }
      ],
      "release_date": "2026-09-29T15:30:27.136000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
    },
    {
      "cve": "CVE-2026-97689",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-29T15:41:38.807723+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543245"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important impact because an untrusted remote server can trigger process crashes and complete denial of service across client applications without requiring authentication or special privileges. In Red Hat environments, urllib3 is integrated across numerous system tools, container workloads, and platform services to handle outbound web communication. The risk specifically manifests when these services process streamed replies from potentially malicious third-party endpoints, whereas workloads restricted to internal or verified infrastructure remain largely unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97689"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543245",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543245"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97689",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed",
          "url": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
          "url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"
        }
      ],
      "release_date": "2026-09-29T15:36:05.963000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
    },
    {
      "cve": "CVE-2026-102267",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-09-28T20:42:16.576688+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important impact because improper handling of HTTP redirects during dynamic key retrieval can allow an adversary to supply forged cryptographic keys or intercept sensitive request headers. In Red Hat environments where services utilize PyJWKClient to fetch JSON Web Key Sets over the network, accepting untrusted key material may compromise token validation and authentication boundaries. Exploitation requires the target service to dynamically resolve keys via HTTP and relies on an attacker\u0027s ability to manipulate responses returned by the configured key server.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102267"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102267",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102267"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",
          "url": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj"
        }
      ],
      "release_date": "2026-09-28T20:23:33.556000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects"
    },
    {
      "cve": "CVE-2026-102268",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-09-28T20:40:56.952621+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: PyJWT: Authentication bypass via improper public key validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102268"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102268",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102268"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
          "url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
        }
      ],
      "release_date": "2026-09-28T20:26:13.674000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
    },
    {
      "cve": "CVE-2026-102272",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-09-28T20:51:42.409127+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity because successful exploitation permits an unauthenticated remote attacker to bypass authentication and forge valid tokens, though exploitation requires specific mixed-algorithm verification settings. In Red Hat environments, exposure is restricted to services that simultaneously allow both symmetric HMAC and asymmetric signature algorithms while parsing public keys that contain byte order marks. Workloads and services that enforce single-algorithm verification policies or utilize standard asymmetric key validation routines are not susceptible to this attack.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102272"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102272",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102272"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291",
          "url": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
        }
      ],
      "release_date": "2026-09-28T20:36:31.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling"
    },
    {
      "cve": "CVE-2026-102273",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-09-28T20:52:12.127939+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542697"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542697",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
          "url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
        }
      ],
      "release_date": "2026-09-28T20:38:28.161000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
    },
    {
      "cve": "CVE-2026-102994",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-30T20:11:27.869277+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544270"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can make a Red Hat service unavailable when pypdf parses a crafted PDF with excessively long indirect-object tokens.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102994"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544270",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544270"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102994",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102994"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e",
          "url": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4055",
          "url": "https://github.com/py-pdf/pypdf/pull/4055"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246"
        }
      ],
      "release_date": "2026-09-30T19:57:37.810000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files"
    },
    {
      "cve": "CVE-2026-102996",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-30T20:31:40.417244+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted PDF document with an oversized font character width array. When processing the document during operations such as text extraction, the library allocates excessive memory, leading to resource exhaustion and potential application failure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can exhaust memory when a Red Hat service extracts text from a crafted PDF with an oversized font width array.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102996"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102996",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102996"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102996",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102996"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5",
          "url": "https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4072",
          "url": "https://github.com/py-pdf/pypdf/pull/4072"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q"
        }
      ],
      "release_date": "2026-09-30T20:03:55.880000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing"
    },
    {
      "cve": "CVE-2026-102997",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition"
      },
      "discovery_date": "2026-09-30T20:33:19.560934+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544294"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. A remote attacker can exploit this vulnerability by providing a crafted PDF document containing a partially malformed FlateDecode data compression stream. When processing the malformed stream, the application triggers an inefficient recovery routine that consumes excessive processing time, potentially resulting in application unresponsiveness and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted FlateDecode stream",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can consume excessive processing time when a Red Hat service decodes a malformed FlateDecode stream in a crafted PDF.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102997"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544294",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544294"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102997",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102997"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102997",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102997"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79",
          "url": "https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4073",
          "url": "https://github.com/py-pdf/pypdf/pull/4073"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3"
        }
      ],
      "release_date": "2026-09-30T20:05:51.538000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted FlateDecode stream"
    },
    {
      "cve": "CVE-2026-102998",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-30T20:32:15.895525+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544283"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted PDF form fields",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can exhaust resources when a Red Hat product uses pypdf to flatten form fields in a crafted PDF; ordinary PDF reading does not trigger it.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102998"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544283",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544283"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102998",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102998"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7",
          "url": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4087",
          "url": "https://github.com/py-pdf/pypdf/pull/4087"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj"
        }
      ],
      "release_date": "2026-09-30T20:09:13.634000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted PDF form fields"
    },
    {
      "cve": "CVE-2026-102999",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-30T20:34:15.273555+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted PDF document containing a large number of embedded files. When an application accesses the attachment mapping, the library repeatedly reparses the entire attachment list for each lookup. This repetitive processing consumes excessive computational resources, leading to severe performance degradation and unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can consume excessive processing time when a Red Hat product accesses pypdf\u2019s attachment mapping for a crafted PDF with many embedded files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102999"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3",
          "url": "https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4081",
          "url": "https://github.com/py-pdf/pypdf/pull/4081"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj"
        }
      ],
      "release_date": "2026-09-30T20:10:38.433000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files"
    },
    {
      "cve": "CVE-2026-103000",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-30T20:34:19.510872+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544308"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. By supplying a specially crafted PDF file containing unusually large alphabetical page-label values, a remote attacker can trigger excessive memory allocation when an application retrieves document page labels. This uncontrolled memory consumption can cause the application to crash or become unresponsive, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via large alphabetical page labels",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can exhaust memory when a Red Hat product retrieves page labels from a crafted PDF containing unusually large alphabetical label values.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-103000"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544308",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544308"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-103000",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-103000"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-103000",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103000"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a",
          "url": "https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4096",
          "url": "https://github.com/py-pdf/pypdf/pull/4096"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c"
        }
      ],
      "release_date": "2026-09-30T20:13:00.379000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via large alphabetical page labels"
    },
    {
      "cve": "CVE-2026-110642",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command"
      },
      "discovery_date": "2026-10-14T14:32:00.185662+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2552249"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xhtml2pdf. This vulnerability allows an attacker to execute arbitrary commands by convincing a user to process a file with a specially crafted name while using the viewer option. Because the software fails to properly sanitize the file name before passing it to the operating system, the injected commands run with the permissions of the user executing the tool.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xhtml2pdf: xhtml2pdf: Arbitrary command execution via crafted file names",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An OS command injection flaw of IMPORTANT impact was found in xhtml2pdf, which Red Hat Quay products and services ship as a bundled dependency. The pisa.startViewer() function interpolates the input file name, without sanitization or escaping, into an os.system() call. When a user runs the pisa command-line tool with the -s/--start-viewer option on an input file whose name contains shell metacharacters (such as a double quote), an attacker can cause arbitrary operating system commands to be executed with the permissions of the invoking user. Exploitation requires local access and user interaction, because the victim must be convinced to process a file with a specially crafted name while using the viewer option; Red Hat rates this flaw as IMPORTANT (CVSS:3.1 7.8, AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), consistent with the upstream severity assessment. The affected Red Hat Quay container images and Quay service components are marked AFFECTED with a DELEGATED resolution, meaning the Quay business unit is pursuing a fix for the bundled xhtml2pdf package.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-110642"
        },
        {
          "category": "external",
          "summary": "RHBZ#2552249",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552249"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-110642",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-110642"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110642",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110642"
        },
        {
          "category": "external",
          "summary": "https://github.com/xhtml2pdf/xhtml2pdf/blob/v0.2.18/xhtml2pdf/pisa.py#L393-L400",
          "url": "https://github.com/xhtml2pdf/xhtml2pdf/blob/v0.2.18/xhtml2pdf/pisa.py#L393-L400"
        },
        {
          "category": "external",
          "summary": "https://github.com/xhtml2pdf/xhtml2pdf/commit/f86380dad15b3a6810201d08755a3ee6b19d5063",
          "url": "https://github.com/xhtml2pdf/xhtml2pdf/commit/f86380dad15b3a6810201d08755a3ee6b19d5063"
        },
        {
          "category": "external",
          "summary": "https://github.com/xhtml2pdf/xhtml2pdf/pull/835",
          "url": "https://github.com/xhtml2pdf/xhtml2pdf/pull/835"
        },
        {
          "category": "external",
          "summary": "https://github.com/xhtml2pdf/xhtml2pdf/releases/tag/v0.2.19",
          "url": "https://github.com/xhtml2pdf/xhtml2pdf/releases/tag/v0.2.19"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/xhtml2pdf-before-0.2.19-os-command-injection-via-startviewer-file-name",
          "url": "https://www.vulncheck.com/advisories/xhtml2pdf-before-0.2.19-os-command-injection-via-startviewer-file-name"
        }
      ],
      "release_date": "2026-10-14T14:17:12.576000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "The vulnerable code path is only reached when the pisa tool is invoked with the -s/--start-viewer option. As a workaround, avoid using the start-viewer option and process only files with trusted file names until a release containing the upstream fix is deployed.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xhtml2pdf: xhtml2pdf: Arbitrary command execution via crafted file names"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dave O\u0027Connor"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-110697",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command"
      },
      "discovery_date": "2026-10-14T14:00:48.387000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2552237"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants\u0027 namespaces, leading to cross-tenant credential theft and unauthorized image operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: quay: SQL LIKE wildcard injection in robot listing leaks cross-tenant robot tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated Critical because it lets an authenticated attacker break tenant isolation in multi-tenant Quay deployments. By creating a namespace whose name contains an underscore that collides with an existing one, the attacker causes the underscore to act as a single-character SQL LIKE wildcard, matching the victim\u0027s namespace. This allows the attacker to list and steal the victim\u0027s robot account tokens, then use them to read, push, or overwrite that tenant\u0027s container images. No elevated privileges or victim interaction are required. In OpenShift environments where Quay serves as the integrated container registry, stolen robot credentials can be used to inject malicious images into CI/CD pipelines, putting the container supply chain across production clusters at risk. Multi-tenant Quay deployments are common in enterprises sharing a registry across teams and in service providers hosting multiple customer organizations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-110697"
        },
        {
          "category": "external",
          "summary": "RHBZ#2552237",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552237"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-110697",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-110697"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110697",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110697"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/solutions/7149592",
          "url": "https://access.redhat.com/solutions/7149592"
        }
      ],
      "release_date": "2026-11-11T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Update to the fixed Red Hat Quay release for your version: 3.9.28, 3.10.28, 3.12.24, 3.14.10, 3.15.9, 3.16.7, 3.17.7, or 3.18.3. Red Hat has already fixed Quay.io. There is no other complete workaround.\nIf you cannot update immediately, restrict who can create organizations or namespaces containing an underscore, rotate robot tokens for any namespace that collides with an underscore-containing one, and monitor registry activity for pulls or pushes that don\u0027t match expected robot usage. These steps reduce exposure but do not fix the underlying flaw.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "quay: quay: SQL LIKE wildcard injection in robot listing leaks cross-tenant robot tokens"
    },
    {
      "cve": "CVE-2026-112390",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition"
      },
      "discovery_date": "2026-10-19T20:51:58.037704+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2555848"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying a specially crafted Microsoft Image Composer (MIC) file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infinite loop. This non-advancing loop consumes excessive CPU resources and can hang application worker processes indefinitely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can induce an infinite loop, exhausting worker CPU resources and resulting in a denial of service for applications handling untrusted image data. Within Red Hat environments, Pillow is deployed across numerous container images, machine learning frameworks, and automated backend services. Exploitation requires the optional olefile dependency to be present to register the Microsoft Image Composer format handler, and specifically targets workflows that query frame counts or process multi-frame images. Environments that do not inspect frame counts or do not have olefile installed are not vulnerable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-112390"
        },
        {
          "category": "external",
          "summary": "RHBZ#2555848",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555848"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-112390",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-112390"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-112390",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112390"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218",
          "url": "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/13.0.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/13.0.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9"
        }
      ],
      "release_date": "2026-10-19T20:35:39.189000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent Pillow from enumerating or extracting frames from untrusted Microsoft Image Composer (MIC) files when olefile is installed: upgrade to Pillow 13.0.0 (or the fixed Python Pillow/Python3.11 Pillow/Rhoai/Odh Openvino Model Server Rhel/Rhelai3/Bootc Cuda Rhel/Rhelai3/Bootc Gaudi Rhel/Rhelai3/Bootc Rocm Rhel/Rhelai3/Disk Image Cuda Rhel/Python3X Pillow/Rhaiis/Vllm Spyre Rhel/Rhoai/Odh Kserve Storage Initializer Rhel/Rhoai/Odh Kserve Agent Rhel/Rhoai/Odh Kserve Controller Rhel/Rhoai/Odh Kserve Router Rhel/Rhoai/Odh Feature Server Rhel/Rhoai/Odh Trustyai Nemo Guardrails Server Rhel/Rhaiis/Vllm Tpu Rhel/Rhoai/Odh Training Cuda128 Torch29 Py312 Rhel/Rhoai/Odh Training Rocm64 Torch29 Py312 Rhel/Rhaiis/Vllm Cpu Rhel/Rhaiis/Vllm Neuron Rhel/Ansible Automation Platform 25/Lightspeed Chatbot Rhel/Openshift Lightspeed/Lightspeed Ocp Rag Rhel/Rhoai/Odh Th06 Cpu Torch291 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch291 Py312 Rhel/Rhoai/Odh Vllm Gaudi Rhel/Python3.12 Pillow/Rhaii/Vllm Gaudi Rhel/Rhaii/Vllm Neuron Rhel/Rhaii/Vllm Tpu Rhel/Lightspeed Core/Lightspeed Stack Rhel/Rhoai/Odh Kserve Autogluon Server Rhel/Rhai Early Access/Docling Sdk Cuda Rhel/Rhai Early Access/Docling Serve Cuda Rhel/Rhoai/Odh Llm D Kv Cache Rhel/Rhoai/Odh Th06 Cpu Torch210 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch210 Py312 Rhel/Rhoai/Odh Th06 Rocm64 Torch291 Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Llmcompressor Cuda Py312 Rhel/Ask Sre/Rhel Cla/Rlsapi Rhel/Rhaiis/Model Opt Cuda Rhel/Rhaiis/Vllm Cuda Rhel/Rhaiis/Vllm Rocm Rhel/Rhaii/Model Opt Cuda Rhel/Rhaii/Vllm Cpu Rhel/Rhaii/Vllm Cuda Rhel/Rhaii/Vllm Rocm Rhel/Rhaii/Vllm Spyre Rhel/Ansible Automation Platform/Automation Dashboard Rhel/Ansible Automation Platform 26/Hub Rhel/Ansible Automation Platform 26/Lightspeed Chatbot Rhel/Ansible Automation Platform 27/Hub Rhel/Ansible Automation Platform 27/Lightspeed Chatbot Rhel/Galaxy Ng/Automation Hub Container/Aap Rag Content/Ansible Chatbot Stack/Koku Report Emailer/Exploit Intelligence/Vulnerability Analysis Rhel/Insights Host Inventory/Google Lightspeed Agent/Lscore Deploy/Lightspeed Core/Rag Tool Cpu Rhel/Lightspeed Core/Rag Tool Cuda 12.9 Rhel/Lightspeed Services Ocp/Ocp Rules Rhel/Openshift Lightspeed Tech Preview/Lightspeed Rag Tool Rhel/Openshift Lightspeed/Lightspeed Service Api Rhel/Rhoai/Odh Caikit Tgis Serving Rhel/Rhoai/Odh Llama Stack Core Rhel/Rhoai/Odh Pipeline Runtime Pytorch Llmcompressor Cuda Py312 Rhel/Rhoai/Odh Automl Rhel/Rhoai/Odh Autorag Rhel/Rhoai/Odh Mlflow Rhel/Rhoai/Odh Pipeline Runtime Datascience Cpu Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch Cuda Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch Rocm Py312 Rhel/Rhoai/Odh Pipeline Runtime Tensorflow Cuda Py312 Rhel/Rhoai/Odh Pipeline Runtime Tensorflow Rocm Py312 Rhel/Rhoai/Odh Trustyai Garak Lls Provider Dsp Rhel/Rhoai/Odh Workbench Codeserver Datascience Cpu Py312 Rhel/Rhoai/Odh Workbench Jupyter Datascience Cpu Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Cuda Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Rocm Py312 Rhel/Rhoai/Odh Workbench Jupyter Tensorflow Cuda Py312 Rhel/Rhoai/Odh Workbench Jupyter Tensorflow Rocm Py312 Rhel/Rhoai/Odh Workbench Jupyter Trustyai Cpu Py312 Rhel/Rhai/Guidellm Rhel/Rhoai/Odh Ogx Core Rhel/Rhoai/Odh Th Torch Cpu Py312 Rhel/Rhoai/Odh Th Torch Cuda Py312 Rhel/Rhoai/Odh Th Torch Rocm Py312 Rhel/Quay/Quay Service Tool/Quay/Quay Rhel/Rhelai3/Bootc Aws Cuda Rhel/Rhelai3/Bootc Azure Cuda Rhel/Rhelai3/Bootc Azure Rocm Rhel/Rhelai3/Bootc Gcp Cuda Rhel builds), which initialize _n_frames in __init__ instead of resetting it in _open(), and avoid re-setting _n_frames and is_animated in _seek() if already set, closing crafted Microsoft Image Composer (MIC) file with an embedded TIFF containing three or more IFDs. Until patched, this is a concern on Applications running Pillow 7.2.0 through 12.3.0 with olefile installed that query n_frames or extract frames from untrusted input, so Reject or sanitize untrusted MIC file uploads at ingestion and avoid calling n_frames or save_all on unverified images in environments where olefile is loaded. As a compensating measure, Impose CPU time limits using ulimit or prlimit to terminate worker processes caught in the non-advancing MIC image parsing loop before system CPU is exhausted and Configure service watchdogs with automatic restart under systemd to detect stalled processes via keep-alives and restore availability. These controls limit blast radius and contain exploitation, but they do not fix the underlying non-advancing frame traversal defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-114 Process Resource Limits (ulimit/prlimit) (medium)",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing"
    },
    {
      "cve": "CVE-2026-118669",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-10-28T21:22:24.906349+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2563201"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oauthlib. In certain token grant flows, the authorization system can authenticate an incoming client while retaining a different, client-supplied identifier for permission and scope validation. A remote, authenticated attacker with lower privileges can exploit this inconsistency by submitting another client\u0027s identifier during token requests. This flaw leads to privilege escalation, potentially allowing the attacker to obtain access tokens with unauthorized permissions and scopes associated with another client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity for Red Hat products because an authenticated client with low privileges can obtain access tokens under a different identity over the network, leading to significant privilege escalation without requiring user interaction. The exposure specifically impacts deployments where the server application relies on the submitted client identifier parameter during scope or grant checks instead of the authenticated client object. Workloads that do not act as an OAuth2 token endpoint or that enforce scope authorization solely from the authenticated entity remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-118669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2563201",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563201"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-118669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-118669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-118669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118669"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d",
          "url": "https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/pull/920",
          "url": "https://github.com/oauthlib/oauthlib/pull/920"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0",
          "url": "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c",
          "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c"
        }
      ],
      "release_date": "2026-10-28T21:09:58.893000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dave O\u0027Connor"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-123710",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-11-06T09:44:27.114000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2568072"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Critical flaw in Red Hat Quay\u0027s service key server allows an unauthenticated attacker to take over registry token signing. Key rotation authenticates the caller only by verifying that the JWT is signed by an already approved service key with the expected audience and issuer, without checking that the token is a rotation credential. An anonymous token minted by /v2/auth satisfies that check. Installed keys inherit approval and can be created without an expiry, so forged registry tokens are accepted for any repository. Deployments where /keys is reachable by untrusted clients are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
          "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-123710"
        },
        {
          "category": "external",
          "summary": "RHBZ#2568072",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2568072"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-123710",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-123710"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-123710",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123710"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/solutions/7149923",
          "url": "https://access.redhat.com/solutions/7149923"
        }
      ],
      "release_date": "2026-11-11T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:31+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99022"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the /keys endpoint at the proxy or load balancer so only trusted internal components can reach it. Review audit logs for service_key_rotate and service_key_delete events with a null expiration_date, and remove any unrecognised approved service keys. Deleting a rogue key is not durable until a fixed build is deployed, because the anonymous request can install a new key.",
          "product_ids": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:1936792a858d534a2a03f644ecd3286867d05dfccf8b21f3267ee35264002add_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:292368c1a464676efe8ea8a6449a2886edee4345d9f440facd0ba44ba18a6cbc_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a39986c6d9e75d23dbd07e90eb24ba981190af1e3e251fcb1f4089798bd5db41_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:dd897e14438f3b095d46165adc79029c6400f7e56a43a5bd1589e75459214f12_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d31ec8e9f3a08e51a58ddd57bec56f07a5a4ea7015fc15407c0d3ae86a20052c_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:2c13936635b213677d82bfb4107a58724f4d0b2d1ef14ad47be84e0569eda844_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5eef5915679cdd361e64c753b9cfd9a1290734443bc4d764933d5187297f7467_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e25c7d8a2278c04ea6ee72fcea40cffef8d3b8979a43b08d689fa92f1b867ea2_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:fe718ce46f9b37e4cccd0230291cbe536414551a782b206c2fb92b25fffd9fd6_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1770166bd7f2e8b8382948c375bea6b91d34bb331cab85e7c449d5aa6bfabae7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:24e980646bd1127b3537144689d3886d8ce2142363adb154deb3b1218938aaf7_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:81a6f60f2a1a0319c99145605d46e03e30362f1442fbfddebace1039b1891e2d_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e9a5f171e58cdd503688bfa875e16eef119550cf4dd7a9df45e5a735aa261dfc_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:3e82dd87829675f77276c23cdfb344cbd45e326d12d94d412a73c44878ca4f28_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d17001ab5b29718575e9c5bf7212fddd627fe056b6958e09873f0d77442d1ea8_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d52fe2316bc64bf4b43824c74830297c08cafe4fba5ef84563dc50e159924017_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:d6e032f221713c39377534ada2e1d79c395e963c6793d6943c5fc40d71382d8c_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bdd344ab40445bc397f36142b56f3aa97647b79e3ff8f761e1b8c2f2cdcff8d7_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:583f6967024a20ba7d971d556a362c462c7ea0d29fb286a9d133476e9a157378_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9840d4781fec0bed492e5fce20b2a59fff34ec830f1095494e1ea752f6bdf2ae_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a4ecdc95b06d19eaeec4217aa34c8e3cce2198fb07f3a91092dce42596e8e67_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:f2531062818df9d5c9aa5710dbe6899666bbbb4a1478dd3a9b711f28c3d755a6_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:51b4d7101af51779f8da42e304586882ac5136a995f2ee85b57edda35a98b1ab_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:c08eac85044bb21a133672083e00e4d8e47dfce501e37bc52e7f6f6768addce4_s390x",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:d821795ca81d34aa2f289922c7e5ece1354190be93a080333355653059166739_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:f3d7559f43efae23ca59be7aeddc39a178037fdffc3b5ffa71fe043e4f82a966_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9-operator@sha256:fd7e52290e6f5afb1505513714c587bcd07f9938d54763f04c1fbacb4b3ec094_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:1d23291d8c3d9ad0fb94dcdc7e3bcc2a0803f9fa85c8f5da0b32a5916ab2ea6f_amd64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:638210c9177f2072f9ad880faa799e7befe1b89d7f9e9cf2cdb2a6319e2d72e1_ppc64le",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:7231fb52927a923805c878fb9471ed02796e94946cff16818373bf25ca6247f6_arm64",
            "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad4f897a00b458aa0869999d8e60a1a3152fe5a13a583c6b1058acea57837664_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation"
    }
  ]
}

CVE-2026-102267 (GCVE-0-2026-102267)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:23 – Updated: 2026-10-01 14:56

Title

PyJWT: PyJWKClient follows redirects when fetching JWKS

Summary

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a configured trusted JWKS endpoint returns an attacker-influenced redirect. As a result, PyJWKClient follows the redirect and consumes the redirected response as key material. Consequently, forwarded credentials may be disclosed or verification keys may be substituted. This issue is fixed in version 2.14.0.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 14:56 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-345 - Insufficient Verification of Data Authenticity
CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/jpadilla/pyjwt/security/adviso…	x_refsource_CONFIRM
https://github.com/jpadilla/pyjwt/commit/0a795b8e…	x_refsource_MISC
https://github.com/jpadilla/pyjwt/releases/tag/2.14.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
jpadilla	pyjwt	Affected: < 2.14.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T14:56:20.518342Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T14:56:29.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pyjwt",
          "vendor": "jpadilla",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.14.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a configured trusted JWKS endpoint returns an attacker-influenced redirect. As a result, PyJWKClient follows the redirect and consumes the redirected response as key material. Consequently, forwarded credentials may be disclosed or verification keys may be substituted. This issue is fixed in version 2.14.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:23:33.556Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        }
      ],
      "source": {
        "advisory": "GHSA-9v7f-9g4p-ffgj",
        "discovery": "UNKNOWN"
      },
      "title": "PyJWT: PyJWKClient follows redirects when fetching JWKS"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102267",
    "datePublished": "2026-09-28T20:23:33.556Z",
    "dateReserved": "2026-09-28T20:11:16.658Z",
    "dateUpdated": "2026-10-01T14:56:29.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102268 (GCVE-0-2026-102268)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:26 – Updated: 2026-09-29 13:59

Title

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Summary

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a mutated public-key PEM as raw key bytes. As a result, HMACAlgorithm.prepare_key treats the unrecognized asymmetric public key as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 13:59 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/jpadilla/pyjwt/security/adviso…	x_refsource_CONFIRM
https://github.com/jpadilla/pyjwt/commit/8b4e233a…	x_refsource_MISC
https://github.com/jpadilla/pyjwt/releases/tag/2.14.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
jpadilla	pyjwt	Affected: < 2.14.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102268",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T13:59:05.202281Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T13:59:11.421Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pyjwt",
          "vendor": "jpadilla",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.14.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a mutated public-key PEM as raw key bytes. As a result, HMACAlgorithm.prepare_key treats the unrecognized asymmetric public key as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:26:13.674Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        }
      ],
      "source": {
        "advisory": "GHSA-ffc3-869f-jxw9",
        "discovery": "UNKNOWN"
      },
      "title": "PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102268",
    "datePublished": "2026-09-28T20:26:13.674Z",
    "dateReserved": "2026-09-28T20:11:16.658Z",
    "dateUpdated": "2026-09-29T13:59:11.421Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102272 (GCVE-0-2026-102272)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:36 – Updated: 2026-09-29 14:45

Title

PyJWT BOM Bypass

Summary

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with a UTF-8 BOM and used in a mixed-algorithm verification path. As a result, public JWK bypasses asymmetric-key detection and becomes the HMAC secret. Consequently, an attacker who knows the public key can forge authenticated tokens. This issue is fixed in version 2.14.0.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 14:45 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/jpadilla/pyjwt/security/adviso…	x_refsource_CONFIRM
https://github.com/jpadilla/pyjwt/commit/18078393…	x_refsource_MISC
https://github.com/jpadilla/pyjwt/releases/tag/2.14.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
jpadilla	pyjwt	Affected: >= 2.13.0, < 2.14.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102272",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T14:45:38.333972Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T14:45:44.138Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pyjwt",
          "vendor": "jpadilla",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.13.0, \u003c 2.14.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with a UTF-8 BOM and used in a mixed-algorithm verification path. As a result, public JWK bypasses asymmetric-key detection and becomes the HMAC secret. Consequently, an attacker who knows the public key can forge authenticated tokens. This issue is fixed in version 2.14.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:36:31.530Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        }
      ],
      "source": {
        "advisory": "GHSA-r6x4-923q-g947",
        "discovery": "UNKNOWN"
      },
      "title": "PyJWT BOM Bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102272",
    "datePublished": "2026-09-28T20:36:31.530Z",
    "dateReserved": "2026-09-28T20:11:16.658Z",
    "dateUpdated": "2026-09-29T14:45:44.138Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102273 (GCVE-0-2026-102273)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:38 – Updated: 2026-09-29 13:44

Title

PyJWT accepts public JWK containers as HMAC secrets

Summary

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because HMAC key guard only recognizes top-level public JWK forms and misses container representations. This occurs when an application allows HMAC and asymmetric algorithms and passes a public JWK container as the raw key. As a result, public asymmetric key material is accepted as the HMAC secret. Consequently, an attacker who knows the public key can forge a token with arbitrary authenticated claims. This issue is fixed in version 2.14.0.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 13:39 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/jpadilla/pyjwt/security/adviso…	x_refsource_CONFIRM
https://github.com/jpadilla/pyjwt/commit/801cd128…	x_refsource_MISC
https://github.com/jpadilla/pyjwt/releases/tag/2.14.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
jpadilla	pyjwt	Affected: >= 2.13.0, < 2.14.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102273",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T13:39:56.542639Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T13:44:49.200Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pyjwt",
          "vendor": "jpadilla",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.13.0, \u003c 2.14.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because HMAC key guard only recognizes top-level public JWK forms and misses container representations. This occurs when an application allows HMAC and asymmetric algorithms and passes a public JWK container as the raw key. As a result, public asymmetric key material is accepted as the HMAC secret. Consequently, an attacker who knows the public key can forge a token with arbitrary authenticated claims. This issue is fixed in version 2.14.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:38:28.161Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
        },
        {
          "name": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        }
      ],
      "source": {
        "advisory": "GHSA-w2cx-738m-mc7w",
        "discovery": "UNKNOWN"
      },
      "title": "PyJWT accepts public JWK containers as HMAC secrets"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102273",
    "datePublished": "2026-09-28T20:38:28.161Z",
    "dateReserved": "2026-09-28T20:11:16.658Z",
    "dateUpdated": "2026-09-29T13:44:49.200Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102994 (GCVE-0-2026-102994)

Vulnerability from cvelistv5 – Published: 2026-09-30 19:57 – Updated: 2026-09-30 20:50

Title

pypdf: Possible long runtimes/large memory usage when parsing indirect objects

Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long time without whitespace can cause pypdf/_reader.py and pypdf/generic/_base.py to scan excessive input through read_until_whitespace, resulting in long runtimes and application unavailability. This issue is fixed in version 6.18.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 20:50 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/py-pdf/pypdf/security/advisori…	x_refsource_CONFIRM
https://github.com/py-pdf/pypdf/pull/4055	x_refsource_MISC
https://github.com/py-pdf/pypdf/commit/82501d2993…	x_refsource_MISC
https://github.com/py-pdf/pypdf/releases/tag/6.18.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
py-pdf	pypdf	Affected: < 6.18.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102994",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T20:50:09.677694Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T20:50:16.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pypdf",
          "vendor": "py-pdf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.18.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long time without whitespace can cause pypdf/_reader.py and pypdf/generic/_base.py to scan excessive input through read_until_whitespace, resulting in long runtimes and application unavailability. This issue is fixed in version 6.18.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T19:57:37.810Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/pull/4055",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/pull/4055"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0"
        }
      ],
      "source": {
        "advisory": "GHSA-5jq2-8x83-x246",
        "discovery": "UNKNOWN"
      },
      "title": "pypdf: Possible long runtimes/large memory usage when parsing indirect objects"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102994",
    "datePublished": "2026-09-30T19:57:37.810Z",
    "dateReserved": "2026-09-29T20:46:08.334Z",
    "dateUpdated": "2026-09-30T20:50:16.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102996 (GCVE-0-2026-102996)

Vulnerability from cvelistv5 – Published: 2026-09-30 20:03 – Updated: 2026-09-30 20:48

Title

pypdf: Possible large memory usage when parsing font data

Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/_font.py Font._collect_tt_t1_character_widths to process entries beyond the 256 character codes meaningful for a simple font and consume excessive memory during operations such as text extraction. This issue is fixed in version 6.18.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 20:48 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/py-pdf/pypdf/security/advisori…	x_refsource_CONFIRM
https://github.com/py-pdf/pypdf/pull/4072	x_refsource_MISC
https://github.com/py-pdf/pypdf/commit/0fb26eb8cd…	x_refsource_MISC
https://github.com/py-pdf/pypdf/releases/tag/6.18.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
py-pdf	pypdf	Affected: < 6.18.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102996",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T20:48:29.732492Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T20:48:39.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pypdf",
          "vendor": "py-pdf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.18.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/_font.py Font._collect_tt_t1_character_widths to process entries beyond the 256 character codes meaningful for a simple font and consume excessive memory during operations such as text extraction. This issue is fixed in version 6.18.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T20:03:55.880Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/pull/4072",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/pull/4072"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1"
        }
      ],
      "source": {
        "advisory": "GHSA-g9cg-prrw-2r8q",
        "discovery": "UNKNOWN"
      },
      "title": "pypdf: Possible large memory usage when parsing font data"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102996",
    "datePublished": "2026-09-30T20:03:55.880Z",
    "dateReserved": "2026-09-29T20:46:08.335Z",
    "dateUpdated": "2026-09-30T20:48:39.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102997 (GCVE-0-2026-102997)

Vulnerability from cvelistv5 – Published: 2026-09-30 20:05 – Updated: 2026-10-02 16:33

Title

pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data can force pypdf/filters.py to use inefficient byte-by-byte decompression while the earlier recovery counter fails to advance for bytes that successfully decode, causing long runtimes and application unavailability. This is a residual issue after the malformed FlateDecode recovery fix. This issue is fixed in version 6.18.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-02 16:33 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/py-pdf/pypdf/security/advisori…	x_refsource_CONFIRM
https://github.com/py-pdf/pypdf/pull/4073	x_refsource_MISC
https://github.com/py-pdf/pypdf/commit/d9d38cf99b…	x_refsource_MISC
https://github.com/py-pdf/pypdf/releases/tag/6.18.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
py-pdf	pypdf	Affected: < 6.18.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102997",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-02T16:33:22.595789Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-02T16:33:34.257Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pypdf",
          "vendor": "py-pdf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.18.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data can force pypdf/filters.py to use inefficient byte-by-byte decompression while the earlier recovery counter fails to advance for bytes that successfully decode, causing long runtimes and application unavailability. This is a residual issue after the malformed FlateDecode recovery fix. This issue is fixed in version 6.18.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T20:05:51.538Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/pull/4073",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/pull/4073"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1"
        }
      ],
      "source": {
        "advisory": "GHSA-jw7q-gvrg-4vj3",
        "discovery": "UNKNOWN"
      },
      "title": "pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102997",
    "datePublished": "2026-09-30T20:05:51.538Z",
    "dateReserved": "2026-09-29T20:46:08.335Z",
    "dateUpdated": "2026-10-02T16:33:34.257Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102998 (GCVE-0-2026-102998)

Vulnerability from cvelistv5 – Published: 2026-09-30 20:09 – Updated: 2026-09-30 20:49

Title

pypdf: Possible long runtimes when generating appearance streams

Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream generation to repeat invariant selection-data work inside a loop when an application updates fields with flattening enabled, resulting in excessive runtimes and application unavailability. This issue is fixed in version 6.19.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 20:49 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/py-pdf/pypdf/security/advisori…	x_refsource_CONFIRM
https://github.com/py-pdf/pypdf/pull/4087	x_refsource_MISC
https://github.com/py-pdf/pypdf/commit/959467a9b9…	x_refsource_MISC
https://github.com/py-pdf/pypdf/releases/tag/6.19.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
py-pdf	pypdf	Affected: < 6.19.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102998",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T20:49:24.715485Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T20:49:30.419Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pypdf",
          "vendor": "py-pdf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.19.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream generation to repeat invariant selection-data work inside a loop when an application updates fields with flattening enabled, resulting in excessive runtimes and application unavailability. This issue is fixed in version 6.19.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T20:09:13.634Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/pull/4087",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/pull/4087"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        }
      ],
      "source": {
        "advisory": "GHSA-php9-fj8v-98fj",
        "discovery": "UNKNOWN"
      },
      "title": "pypdf: Possible long runtimes when generating appearance streams"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102998",
    "datePublished": "2026-09-30T20:09:13.634Z",
    "dateReserved": "2026-09-29T20:46:08.335Z",
    "dateUpdated": "2026-09-30T20:49:30.419Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102999 (GCVE-0-2026-102999)

Vulnerability from cvelistv5 – Published: 2026-09-30 20:10 – Updated: 2026-10-01 18:51

Title

pypdf: Possible long runtimes with large amount of embedded files

Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/_doc_common.py to reparse the full attachment list for each content lookup, producing repeated work and long runtimes when an application accesses the embedded-file mapping. This issue is fixed in version 6.19.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 18:51 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/py-pdf/pypdf/security/advisori…	x_refsource_CONFIRM
https://github.com/py-pdf/pypdf/pull/4081	x_refsource_MISC
https://github.com/py-pdf/pypdf/commit/6b10556d13…	x_refsource_MISC
https://github.com/py-pdf/pypdf/releases/tag/6.19.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
py-pdf	pypdf	Affected: < 6.19.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102999",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T18:51:12.395176Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T18:51:27.463Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pypdf",
          "vendor": "py-pdf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.19.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/_doc_common.py to reparse the full attachment list for each content lookup, producing repeated work and long runtimes when an application accesses the embedded-file mapping. This issue is fixed in version 6.19.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T20:10:38.433Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/pull/4081",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/pull/4081"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        }
      ],
      "source": {
        "advisory": "GHSA-v247-6f48-mgcj",
        "discovery": "UNKNOWN"
      },
      "title": "pypdf: Possible long runtimes with large amount of embedded files"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102999",
    "datePublished": "2026-09-30T20:10:38.433Z",
    "dateReserved": "2026-09-29T20:46:08.335Z",
    "dateUpdated": "2026-10-01T18:51:27.463Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103000 (GCVE-0-2026-103000)

Vulnerability from cvelistv5 – Published: 2026-09-30 20:13 – Updated: 2026-09-30 20:49

Title

pypdf: Possible large memory usage when retrieving alphabetical page labels

Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause pypdf/_page_labels.py to generate strings beyond a reasonable page-label length when an application retrieves document page labels, consuming excessive memory and potentially making the application unavailable. This issue is fixed in version 6.19.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 20:49 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/py-pdf/pypdf/security/advisori…	x_refsource_CONFIRM
https://github.com/py-pdf/pypdf/pull/4096	x_refsource_MISC
https://github.com/py-pdf/pypdf/commit/0d8b5a8832…	x_refsource_MISC
https://github.com/py-pdf/pypdf/releases/tag/6.19.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
py-pdf	pypdf	Affected: < 6.19.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103000",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T20:49:14.062135Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T20:49:21.058Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pypdf",
          "vendor": "py-pdf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.19.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause pypdf/_page_labels.py to generate strings beyond a reasonable page-label length when an application retrieves document page labels, consuming excessive memory and potentially making the application unavailable. This issue is fixed in version 6.19.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T20:13:00.379Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/pull/4096",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/pull/4096"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a"
        },
        {
          "name": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        }
      ],
      "source": {
        "advisory": "GHSA-w23x-9jrw-r45c",
        "discovery": "UNKNOWN"
      },
      "title": "pypdf: Possible large memory usage when retrieving alphabetical page labels"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-103000",
    "datePublished": "2026-09-30T20:13:00.379Z",
    "dateReserved": "2026-09-29T20:46:08.335Z",
    "dateUpdated": "2026-09-30T20:49:21.058Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:99022

CVE-2026-102267 (GCVE-0-2026-102267)

CVE-2026-102268 (GCVE-0-2026-102268)

CVE-2026-102272 (GCVE-0-2026-102272)

CVE-2026-102273 (GCVE-0-2026-102273)

CVE-2026-102994 (GCVE-0-2026-102994)

CVE-2026-102996 (GCVE-0-2026-102996)

CVE-2026-102997 (GCVE-0-2026-102997)

CVE-2026-102998 (GCVE-0-2026-102998)

CVE-2026-102999 (GCVE-0-2026-102999)

CVE-2026-103000 (GCVE-0-2026-103000)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour