Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-13676 (GCVE-0-2026-13676)
Vulnerability from cvelistv5 – Published: 2026-06-29 13:22 – Updated: 2026-07-28 12:04
VLAI
EPSS
VEX
Title
fast-uri vulnerable to host confusion via failed IDN canonicalization
Summary
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node's URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
18 references
Impacted products
42 products
| Vendor | Product | Version | |
|---|---|---|---|
| fast-uri | fast-uri |
Affected:
4.0.0 , < 4.0.1
(semver)
Unaffected: 4.0.1 (semver) Affected: 2.3.1 , < 3.1.3 (semver) Unaffected: 3.1.3 (semver) |
|
| Red Hat | Red Hat Ansible Automation Platform 2.2 |
Unaffected:
1784622951 , < *
(rpm)
cpe:/a:redhat:ansible_portal:2.2 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1784210921 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194938 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126822 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 |
Unaffected:
1784109883 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.2::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1784144829 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1783596795 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1783510956 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1783559447 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1784729919 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat build of Apicurio Registry 3 |
cpe:/a:redhat:apicurio_registry:3 |
|
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Data Grid 8 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | Red Hat Discovery 2 |
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4 |
|
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
Credits
celinke97
UlisesGascon
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13676",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T13:53:20.906495Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T13:53:31.092Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2.2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Red Hat Ansible Automation Platform 2.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784622951",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784210921",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194938",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-solution-server-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784109883",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784144829",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783596795",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783510956",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783559447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784729919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-pccs",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "grafana-infinity-datasource-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-agentic-console-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "fast-uri",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-24/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/mcp-server-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-platform-ui",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "fast-uri",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel9",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "rh-podman-desktop.git",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-console-plugin-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "affected",
"packageName": "fast-uri",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "linux-sgx",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "linux-sgx",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-compression-webpack-plugin",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-mini-css-extract-plugin",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-webpack",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-advisor-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-remediations-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-29T13:22:44.674Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-551",
"description": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T12:04:49.506Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"name": "RHBZ#2494197",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13676.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40765"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37628"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37186"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44239"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42815: Red Hat Ansible Automation Platform 2.2"
},
{
"lang": "en",
"value": "RHSA-2026:41929: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
},
{
"lang": "en",
"value": "RHSA-2026:40765: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:37628: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:37186: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:44239: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:37585: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T14:01:55.592Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-29T13:22:44.674Z",
"value": "Made public."
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/fast-uri",
"product": "fast-uri",
"vendor": "fast-uri",
"versions": [
{
"lessThan": "4.0.1",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.0.1",
"versionType": "semver"
},
{
"lessThan": "3.1.3",
"status": "affected",
"version": "2.3.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "3.1.3",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "celinke97"
},
{
"lang": "en",
"type": "remediation developer",
"value": "UlisesGascon"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks."
}
],
"value": "fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-436",
"description": "CWE-436: Interpretation Conflict",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T13:22:44.674Z",
"orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
"shortName": "openjs"
},
"references": [
{
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
},
{
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"title": "fast-uri vulnerable to host confusion via failed IDN canonicalization",
"x_generator": {
"engine": "cve-kit 1.0.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
"assignerShortName": "openjs",
"cveId": "CVE-2026-13676",
"datePublished": "2026-06-29T13:22:44.674Z",
"dateReserved": "2026-06-29T10:37:49.461Z",
"dateUpdated": "2026-07-28T12:04:49.506Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-13676",
"date": "2026-07-27",
"epss": "0.00384",
"percentile": "0.31009"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-13676\",\"sourceIdentifier\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"published\":\"2026-06-29T14:16:47.967\",\"lastModified\":\"2026-07-28T13:17:32.850\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.\"}],\"affected\":[{\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"affectedData\":[{\"vendor\":\"fast-uri\",\"product\":\"fast-uri\",\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:npm/fast-uri\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.0.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.0.1\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"2.3.1\",\"lessThan\":\"3.1.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.1.3\",\"versionType\":\"semver\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2.2\"],\"versions\":[{\"version\":\"1784622951\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1784210921\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194938\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-solution-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"],\"versions\":[{\"version\":\"1784109883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1784144829\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1783596795\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1783510956\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1783559447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1784729919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-pccs\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat-openshift-console-plugin-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-infinity-datasource-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-agentic-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-419-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fast-uri\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-24/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/mcp-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-tech-preview/mcp-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-platform-ui\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fast-uri\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-podman-desktop.git\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fast-uri\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"linux-sgx\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"linux-sgx\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-compression-webpack-plugin\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-mini-css-extract-plugin\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-webpack\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-advisor-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-host-inventory-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-remediations-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/bootc-automation-portal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-29T13:53:20.906495Z\",\"id\":\"CVE-2026-13676\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-436\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-551\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openjsf:fast-uri:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"2.3.1\",\"versionEndExcluding\":\"3.1.3\",\"matchCriteriaId\":\"46C0FBD7-1F69-434D-BB22-77DB690E5B57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openjsf:fast-uri:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.0.1\",\"matchCriteriaId\":\"02E99302-2BFD-441E-B645-1A5DBFC3E9B9\"}]}]}],\"references\":[{\"url\":\"https://cna.openjsf.org/security-advisories.html\",\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6\",\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37186\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37628\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40765\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41929\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42815\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44239\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-13676\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2494197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13676.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-28T07:36:47+00:00",
"cve": "CVE-2026-13676",
"id": "CVE-2026-13676",
"initial_release_date": "2026-06-29T13:22:44.674000+00:00",
"product_status:fixed": "40",
"product_status:known_affected": "77",
"product_status:known_not_affected": "2405",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13676.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-07T02:38:43Z",
"cve": "CVE-2026-13676",
"id": "CVE-2026-13676",
"initial_release_date": "2026-06-30T01:49:25Z",
"product_status:known_affected": "8",
"product_status:recommended": "4",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-13676",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-13676.json",
"version": "4"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_portal:2.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784622951\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784210921\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194938\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784109883\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-solution-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784144829\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783596795\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783510956\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783559447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784729919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-pccs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat-openshift-console-plugin-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"grafana-infinity-datasource-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-agentic-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-419-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"fast-uri\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-24/lightspeed-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/lightspeed-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/lightspeed-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/lightspeed-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/mcp-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-tech-preview/mcp-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-platform-ui\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"fast-uri\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"rh-podman-desktop.git\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"fast-uri\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"linux-sgx\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"linux-sgx\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-compression-webpack-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-mini-css-extract-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-webpack\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-advisor-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-host-inventory-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-remediations-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/bootc-automation-portal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-29T14:01:55.592Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-29T13:22:44.674Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42815: Red Hat Ansible Automation Platform 2.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41929: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40765: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37628: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37186: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44239: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37585: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-29T13:22:44.674Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-13676\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2494197\", \"name\": \"RHBZ#2494197\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13676.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42815\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41929\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40765\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37628\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37186\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44239\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-551\", \"description\": \"Incorrect Behavior Order: Authorization Before Parsing and Canonicalization\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-28T12:04:49.506Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-13676\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-29T13:53:20.906495Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-29T13:53:26.275Z\"}}], \"cna\": {\"title\": \"fast-uri vulnerable to host confusion via failed IDN canonicalization\", \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"celinke97\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"UlisesGascon\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"fast-uri\", \"product\": \"fast-uri\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.0.1\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.0.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.3.1\", \"lessThan\": \"3.1.3\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"3.1.3\", \"versionType\": \"semver\"}], \"packageURL\": \"pkg:npm/fast-uri\", \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6\"}, {\"url\": \"https://cna.openjsf.org/security-advisories.html\"}], \"x_generator\": {\"engine\": \"cve-kit 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-436\", \"description\": \"CWE-436: Interpretation Conflict\"}]}], \"providerMetadata\": {\"orgId\": \"ce714d77-add3-4f53-aff5-83d477b104bb\", \"shortName\": \"openjs\", \"dateUpdated\": \"2026-06-29T13:22:44.674Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-13676\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-28T12:04:49.506Z\", \"dateReserved\": \"2026-06-29T10:37:49.461Z\", \"assignerOrgId\": \"ce714d77-add3-4f53-aff5-83d477b104bb\", \"datePublished\": \"2026-06-29T13:22:44.674Z\", \"assignerShortName\": \"openjs\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:41066
Vulnerability from csaf_redhat - Published: 2026-07-16 19:46 - Updated: 2026-07-28 12:15Summary
Red Hat Security Advisory: Red Hat Quay 3.16.5
Severity
Important
Notes
Topic: Red Hat Quay 3.16.5 is now available with bug fixes.
Details: Quay 3.16.5
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
References
254 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.5 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41066",
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41066.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.5",
"tracking": {
"current_release_date": "2026-07-28T12:15:04+00:00",
"generator": {
"date": "2026-07-28T12:15:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41066",
"initial_release_date": "2026-07-16T19:46:27+00:00",
"revision_history": [
{
"date": "2026-07-16T19:46:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-28T12:15:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783749869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783749615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783748503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783961339"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ab17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Aa557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Af51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aa4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ac65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Afe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-07-28 13:15Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-07-28T13:15:49+00:00",
"generator": {
"date": "2026-07-28T13:15:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-28T13:15:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit 1.8",
"product": {
"name": "Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41929
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-07-28 11:33Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.9.7 release.
Severity
Important
Notes
Topic: Red Hat Developer Hub 1.9.7 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in opentelemetry-js, specifically within the OpenTelemetry JavaScript (JS) Prometheus exporter. A remote attacker could exploit this vulnerability by sending a single malformed HTTP request to the metrics endpoint. This lack of proper error handling during URL parsing can cause an uncaught TypeError, leading to the termination of any Node.js process running the exporter. This results in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 | — |
Workaround
|
Threats
Impact
Important
References
64 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.9.7 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41929",
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44902",
"url": "https://access.redhat.com/security/cve/CVE-2026-44902"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45740",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41929.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.9.7 release.",
"tracking": {
"current_release_date": "2026-07-28T11:33:55+00:00",
"generator": {
"date": "2026-07-28T11:33:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41929",
"initial_release_date": "2026-07-20T08:34:32+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-28T11:33:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.9",
"product": {
"name": "Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3A923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9\u0026tag=1784210921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3Ab1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator\u0026tag=1784210575"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3Ac26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle\u0026tag=1784215493"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-44902",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-05-27T16:02:06.958159+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482216"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in opentelemetry-js, specifically within the OpenTelemetry JavaScript (JS) Prometheus exporter. A remote attacker could exploit this vulnerability by sending a single malformed HTTP request to the metrics endpoint. This lack of proper error handling during URL parsing can cause an uncaught TypeError, leading to the termination of any Node.js process running the exporter. This results in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. A remote attacker can trigger a Denial of Service by sending a malformed HTTP request to the OpenTelemetry JS Prometheus exporter\u0027s metrics endpoint, causing the Node.js process to terminate. This impacts Red Hat products that deploy the affected exporter, leading to service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44902"
},
{
"category": "external",
"summary": "RHBZ#2482216",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482216"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44902"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44902",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44902"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-q7rr-3cgh-j5r3",
"url": "https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-q7rr-3cgh-j5r3"
}
],
"release_date": "2026-05-27T14:49:04.940000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request"
},
{
"cve": "CVE-2026-45740",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-05-13T16:02:41.729478+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in protobufjs, which could allow a remote attacker to exhaust the JavaScript call stack by providing a specially crafted JSON descriptor with deeply nested namespace definitions. This vulnerability impacts Red Hat products that utilize protobufjs for processing protobuf definitions potentially leading to application unresponsiveness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "RHBZ#2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6"
}
],
"release_date": "2026-05-13T14:46:02.689000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:32+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid loading untrusted protobuf JSON descriptors in applications utilizing protobufjs. If untrusted descriptors must be processed, implement validation at an outer boundary to reject excessively nested structures. Alternatively, isolate the descriptor loading process in an environment that can be safely restarted in case of a denial of service.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:923a9219b3efa5535b7f0b5aec597f04d66c2edb9a3bea4c70c0273cea5be382_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:c26504289ade9a1e816d18cd94af9b6a47fb7ffe66185679d0527376fb505486_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b1ee0b75525f1873a1ba066102043a8bd28a5867d4d077fefff34444a658e473_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors"
}
]
}
RHSA-2026:42815
Vulnerability from csaf_redhat - Published: 2026-07-21 14:07 - Updated: 2026-07-28 11:33Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2 security update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.
Details: Red Hat Ansible Automation Platform 2.2 delivers an Ansible-first Red Hat Developer Hub
user experience that simplifies the automation experience for Ansible users of all skill levels.
The Ansible plug-ins provide curated content and features to accelerate Ansible learner
onboarding and streamline Ansible use case adoption across your organization.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by sending a specially crafted protobuf binary payload. This payload could cause uncontrolled recursion during the decoding of nested protobuf data, leading to the exhaustion of the JavaScript call stack. This ultimately results in a Denial of Service (DoS) for applications using the affected library.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in linkify-it, a library for recognizing links with full Unicode support. The LinkifyIt.prototype.match function, the package's primary public API, has an algorithmic complexity of O(N²) for inputs containing many fuzzy links or emails. This can be exploited by a remote attacker sending a specially crafted request body, leading to a worker-process denial of service (DoS) due to excessive CPU usage when synchronously rendering untrusted Markdown with linkify enabled.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a <template>.content. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
79 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform 2.2 delivers an Ansible-first Red Hat Developer Hub\nuser experience that simplifies the automation experience for Ansible users of all skill levels.\nThe Ansible plug-ins provide curated content and features to accelerate Ansible learner\nonboarding and streamline Ansible use case adoption across your organization.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42815",
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44289",
"url": "https://access.redhat.com/security/cve/CVE-2026-44289"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44290",
"url": "https://access.redhat.com/security/cve/CVE-2026-44290"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44291",
"url": "https://access.redhat.com/security/cve/CVE-2026-44291"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44292",
"url": "https://access.redhat.com/security/cve/CVE-2026-44292"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45740",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48801",
"url": "https://access.redhat.com/security/cve/CVE-2026-48801"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-49978",
"url": "https://access.redhat.com/security/cve/CVE-2026-49978"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59873",
"url": "https://access.redhat.com/security/cve/CVE-2026-59873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59874",
"url": "https://access.redhat.com/security/cve/CVE-2026-59874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42815.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2 security update",
"tracking": {
"current_release_date": "2026-07-28T11:33:56+00:00",
"generator": {
"date": "2026-07-28T11:33:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:42815",
"initial_release_date": "2026-07-21T14:07:31+00:00",
"revision_history": [
{
"date": "2026-07-21T14:07:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-28T11:33:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.2",
"product": {
"name": "Red Hat Ansible Automation Platform 2.2",
"product_id": "Red Hat Ansible Automation Platform 2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_portal:2.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/automation-portal@sha256%3A22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/automation-portal\u0026tag=1784622951"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64 as a component of Red Hat Ansible Automation Platform 2.2",
"product_id": "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-44289",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-13T16:05:16.500414+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by sending a specially crafted protobuf binary payload. This payload could cause uncontrolled recursion during the decoding of nested protobuf data, leading to the exhaustion of the JavaScript call stack. This ultimately results in a Denial of Service (DoS) for applications using the affected library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An uncontrolled recursion vulnerability was discovered in protobufjs which can allow a remote attacker to cause a Denial of Service (DoS) via stack exhaustion. Red Hat products bundling vulnerable instances of this npm package (specifically versions prior to 7.5.6 and 8.0.2) are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44289"
},
{
"category": "external",
"summary": "RHBZ#2477130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44289"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44289",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44289"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-685m-2w69-288q",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-685m-2w69-288q"
}
],
"release_date": "2026-05-13T14:39:09.791000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "Avoid decoding untrusted protobuf binary data with affected versions. If immediate upgrade is not possible, reject excessively nested messages at an outer protocol boundary where feasible, or isolate protobuf decoding in a process that can be safely restarted.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding"
},
{
"cve": "CVE-2026-44290",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:39.540492+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477100"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted schema",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in protobufjs. A remote attacker could provide a specially crafted protobuf schema or JSON descriptor, which, when processed by an application using protobufjs, could corrupt process-wide built-in functionality, leading to a persistent denial of service. This impact is contingent on the application parsing untrusted schemas or descriptors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44290"
},
{
"category": "external",
"summary": "RHBZ#2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg"
}
],
"release_date": "2026-05-13T14:41:15.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends configuring applications to avoid parsing or loading protobuf schemas or JSON descriptors from untrusted sources. If processing untrusted schemas is unavoidable, implement strict validation to reject option names containing unsafe property path components before loading them. Additionally, consider running schema processing in an isolated environment to limit the blast radius of potential corruption.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted schema"
},
{
"cve": "CVE-2026-44291",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-05-13T16:04:13.828371+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in protobufjs, a JavaScript library, potentially enables arbitrary code execution when a separate prototype pollution vulnerability is present in an application. Exploitation requires an attacker to first pollute `Object.prototype` and then trigger protobufjs functionality that generates encode or decode code for affected types. Red Hat products utilizing `protobufjs` may be impacted if they are vulnerable to prototype pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44291"
},
{
"category": "external",
"summary": "RHBZ#2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7"
}
],
"release_date": "2026-05-13T14:42:13.984000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "Mitigation involves preventing prototype pollution within applications that utilize protobufjs. Administrators should ensure that untrusted input cannot pollute `Object.prototype` in the application or its dependencies. Additionally, isolating schema and message processing from untrusted application states can prevent attacker-controlled properties from being resolved as valid protobuf type information.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution"
},
{
"cve": "CVE-2026-44292",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:03.431568+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477088"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Data integrity impact due to prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where `protobufjs` can be exploited for prototype pollution on individual message instances. Applications that construct `protobufjs` messages from attacker-controlled plain objects, particularly those parsing untrusted JSON input, are susceptible to data integrity issues through manipulation of the object\u0027s prototype chain. This does not affect global prototypes but can lead to unexpected application behavior.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44292"
},
{
"category": "external",
"summary": "RHBZ#2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w"
}
],
"release_date": "2026-05-13T14:42:55.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should avoid directly passing attacker-controlled plain objects to protobufjs message constructors. If processing untrusted JSON input, it is crucial to validate or sanitize object keys and explicitly reject any `__proto__` properties before constructing protobuf messages. This operational control prevents the manipulation of message instance prototypes.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Data integrity impact due to prototype pollution"
},
{
"cve": "CVE-2026-45740",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-05-13T16:02:41.729478+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in protobufjs, which could allow a remote attacker to exhaust the JavaScript call stack by providing a specially crafted JSON descriptor with deeply nested namespace definitions. This vulnerability impacts Red Hat products that utilize protobufjs for processing protobuf definitions potentially leading to application unresponsiveness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "RHBZ#2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6"
}
],
"release_date": "2026-05-13T14:46:02.689000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid loading untrusted protobuf JSON descriptors in applications utilizing protobufjs. If untrusted descriptors must be processed, implement validation at an outer boundary to reject excessively nested structures. Alternatively, isolate the descriptor loading process in an environment that can be safely restarted in case of a denial of service.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors"
},
{
"cve": "CVE-2026-48801",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-07-14T21:02:55.149976+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500656"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in linkify-it, a library for recognizing links with full Unicode support. The LinkifyIt.prototype.match function, the package\u0027s primary public API, has an algorithmic complexity of O(N\u00b2) for inputs containing many fuzzy links or emails. This can be exploited by a remote attacker sending a specially crafted request body, leading to a worker-process denial of service (DoS) due to excessive CPU usage when synchronously rendering untrusted Markdown with linkify enabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in linkify-it, a link recognition library, can lead to a denial of service in Red Hat products. The vulnerability arises from an O(N\u00b2) algorithmic complexity when processing untrusted Markdown with numerous fuzzy links or emails, potentially causing excessive CPU consumption and worker-process unavailability. This risk is present in services that synchronously render untrusted Markdown with the linkify feature enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48801"
},
{
"category": "external",
"summary": "RHBZ#2500656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48801"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48801",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48801"
},
{
"category": "external",
"summary": "https://github.com/markdown-it/linkify-it/commit/6be6d15e0641bf1daeaa977d500cabc743166159",
"url": "https://github.com/markdown-it/linkify-it/commit/6be6d15e0641bf1daeaa977d500cabc743166159"
},
{
"category": "external",
"summary": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-22p9-wv53-3rq4",
"url": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-22p9-wv53-3rq4"
}
],
"release_date": "2026-07-14T20:03:56.430000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability"
},
{
"cve": "CVE-2026-49978",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-07-14T21:05:26.253019+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a \u003ctemplate\u003e.content. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-49978"
},
{
"category": "external",
"summary": "RHBZ#2500695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
"url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
"url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
"url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
}
],
"release_date": "2026-07-14T20:02:46.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
},
{
"cve": "CVE-2026-59873",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-08T16:01:31.576716+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498120"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tar: node-tar: Denial of Service via crafted gzip bomb",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in node-tar is rated as Important. A remote attacker can exploit the lack of strict limits on decompressed data and entry counts within the library\u0027s archive processing to craft a gzip bomb. This can lead to a denial of service by exhausting system resources such as disk space and CPU, making the affected system or application unavailable without requiring authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59873"
},
{
"category": "external",
"summary": "RHBZ#2498120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59873"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3",
"url": "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/releases/tag/v7.5.19",
"url": "https://github.com/isaacs/node-tar/releases/tag/v7.5.19"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw"
}
],
"release_date": "2026-07-08T15:22:40.077000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tar: node-tar: Denial of Service via crafted gzip bomb"
},
{
"cve": "CVE-2026-59874",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:09.952291+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498116"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tar: Node-tar: Denial of Service via malformed tar archive header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in node-tar affects Red Hat products that process untrusted tar archives. A remote attacker can provide a specially crafted archive with a malformed header, leading to an infinite loop during parsing and causing the application to become unresponsive. This can impact the availability of services relying on node-tar for archive manipulation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59874"
},
{
"category": "external",
"summary": "RHBZ#2498116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498116"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59874"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5",
"url": "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/releases/tag/v7.5.18",
"url": "https://github.com/isaacs/node-tar/releases/tag/v7.5.18"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w"
}
],
"release_date": "2026-07-08T15:23:47.527000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:07:31+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42815"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:22b248581cace0f76628071e1fcb111e212479e3096fd6a70bac3823c3ce4f0f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tar: Node-tar: Denial of Service via malformed tar archive header"
}
]
}
RHSA-2026:43038
Vulnerability from csaf_redhat - Published: 2026-07-21 22:10 - Updated: 2026-07-28 13:05Summary
Red Hat Security Advisory: Migration Toolkit for Applications
Severity
Critical
Notes
Topic: A new version of Migration Toolkit for Applications (MTA) is now available.
Details: Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift.
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in jupyter-server. This path traversal vulnerability exists due to insufficient validation of file paths, specifically an incorrect root directory boundary check and improper handling of directory traversal sequences. This allows a remote attacker with low privileges to bypass directory restrictions and gain unauthorized read and write access to files in sibling directories. This could lead to the exposure of sensitive data, particularly in shared hosting environments.
6.8 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Moderate
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in python-dotenv. A local attacker can exploit this by crafting a symbolic link, which the `set_key()` and `unset_key()` functions in python-dotenv follow when rewriting `.env` files. This can lead to the overwriting of arbitrary files on the system.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Mistune, a Markdown parser. This vulnerability, known as Regular Expression Denial of Service (ReDoS), exists in the `LINK_TITLE_RE` regular expression. A remote attacker can exploit this by providing specially crafted Markdown input, which causes the regular expression engine to engage in catastrophic backtracking. This leads to significant CPU consumption, making applications that use Mistune unresponsive and resulting in a Denial of Service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.
7.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Jupyter Server. An authenticated user can exploit a path traversal vulnerability in the REST API to escape the configured root directory (`root_dir`). By crafting a request to the `/api/contents` endpoint with encoded path components, an attacker can gain access to sibling directories whose names begin with the same prefix as the `root_dir`. This allows the attacker to read, write, and delete files in these accessible sibling directories, potentially leading to unauthorized data access and modification, especially in multi-tenant environments.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Jupyter Server. The Origin header validation, which uses Python's `re.match()` function, does not correctly validate incoming origins against allowed patterns. This allows a remote attacker to bypass Cross-Origin Resource Sharing (CORS) restrictions by crafting a malicious domain that partially matches a trusted one. Consequently, the attacker can make unauthorized cross-origin requests to the Jupyter Server API from an untrusted site, potentially leading to sensitive information disclosure or other unauthorized actions.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Jupyter Notebook and JupyterLab. A stored cross-site scripting (XSS) vulnerability in the help command linker can be exploited by an attacker who crafts a malicious notebook file. When a user interacts with this file, the XSS is triggered, allowing the attacker to steal authentication tokens. Successful exploitation can lead to a complete takeover of the Jupyter session, enabling arbitrary code execution and information disclosure.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in JupyterLab, an extensible environment for interactive computing. The PyPI Extension Manager, responsible for installing extensions, failed to properly enforce its allow-list of approved extensions. This vulnerability allowed for the installation of unauthorized extensions from sources outside the default PyPI index. Exploitation of this flaw could lead to arbitrary code execution and significant system compromise.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jupyterlab. This vulnerability allows a remote attacker to achieve arbitrary code execution by presenting a user with a specially crafted notebook containing a deceptive button in its pre-saved HTML cell output. When the user clicks this button, the CommandLinker component executes arbitrary JupyterLab commands without sufficient validation, leading to the execution of unauthorized code.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in python-multipart. A remote attacker can exploit this denial of service (DoS) vulnerability by sending a specially crafted request with an excessive number of part headers or a single very large header value during multipart/form-data parsing. This can lead to excessive CPU utilization, resulting in a denial of service for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.
5.9 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Moderate
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Important
A flaw was found in Jupyter Server. The nbconvert HTTP handlers in Jupyter Server render user-authored notebook HTML without a sandbox directive in their Content-Security-Policy. This, combined with nbconvert.HTMLExporter's default non-sanitizing behavior, allows a notebook containing an HTML payload to trigger a stored Cross-Site Scripting (XSS) vulnerability. A remote attacker could exploit this to gain cookie access, full API authority, and achieve kernel Remote Code Execution (RCE).
9.0 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Important
A flaw was found in LangChain, a framework for building agents and large language model (LLM)-powered applications. Older runtime code paths within LangChain deserialize application-controlled payloads using overly broad object allowlists. A remote attacker can exploit this by supplying specially crafted LangChain serialized constructor dictionaries, leading to the instantiation of classes with untrusted arguments. This can result in the disclosure of sensitive information and potential partial compromise of data integrity.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Threats
Impact
Important
A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions.
6.5 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette's trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations.
9.1 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in joserfc, a Python library for JSON Object Signing and Encryption (JOSE). This vulnerability allows a remote attacker to cause resource exhaustion, leading to a Denial of Service (DoS), by sending oversized JSON Web Signature (JWS) payloads. The library fails to apply size limits, specifically JWSRegistry.max_payload_length, when processing RFC7797 b64=false JWS payloads.
5.3 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Starlette where the request.form() method silently ignores configured resource limits (max_fields and max_part_size) when parsing application/x-www-form-urlencoded data. An unauthenticated attacker can exploit this by sending a urlencoded request body with an arbitrarily large number of fields or an oversized field, causing denial of service through resource exhaustion.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in httplib2, a Python HTTP client library. This vulnerability allows a malicious or compromised HTTP server to send a small compressed data payload that, when decompressed by httplib2, expands to an extremely large size in memory. This unbounded decompression can lead to a Denial of Service (DoS) by causing the client application to run out of memory and crash.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 | — |
Workaround
|
Threats
Impact
Important
References
225 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Applications (MTA) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. \nThis solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage\napplications for faster migration to OpenShift via the user interface.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:43038",
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28684",
"url": "https://access.redhat.com/security/cve/CVE-2026-28684"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33079",
"url": "https://access.redhat.com/security/cve/CVE-2026-33079"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34993",
"url": "https://access.redhat.com/security/cve/CVE-2026-34993"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35397",
"url": "https://access.redhat.com/security/cve/CVE-2026-35397"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40110",
"url": "https://access.redhat.com/security/cve/CVE-2026-40110"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40171",
"url": "https://access.redhat.com/security/cve/CVE-2026-40171"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42266",
"url": "https://access.redhat.com/security/cve/CVE-2026-42266"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42557",
"url": "https://access.redhat.com/security/cve/CVE-2026-42557"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42561",
"url": "https://access.redhat.com/security/cve/CVE-2026-42561"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44431",
"url": "https://access.redhat.com/security/cve/CVE-2026-44431"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44727",
"url": "https://access.redhat.com/security/cve/CVE-2026-44727"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44843",
"url": "https://access.redhat.com/security/cve/CVE-2026-44843"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45292",
"url": "https://access.redhat.com/security/cve/CVE-2026-45292"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48710",
"url": "https://access.redhat.com/security/cve/CVE-2026-48710"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48746",
"url": "https://access.redhat.com/security/cve/CVE-2026-48746"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48990",
"url": "https://access.redhat.com/security/cve/CVE-2026-48990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5422",
"url": "https://access.redhat.com/security/cve/CVE-2026-5422"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54283",
"url": "https://access.redhat.com/security/cve/CVE-2026-54283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59939",
"url": "https://access.redhat.com/security/cve/CVE-2026-59939"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://developers.redhat.com/products/mta/overview",
"url": "https://developers.redhat.com/products/mta/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/",
"url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43038.json"
}
],
"title": "Red Hat Security Advisory: Migration Toolkit for Applications",
"tracking": {
"current_release_date": "2026-07-28T13:05:34+00:00",
"generator": {
"date": "2026-07-28T13:05:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:43038",
"initial_release_date": "2026-07-21T22:10:10+00:00",
"revision_history": [
{
"date": "2026-07-21T22:10:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-28T13:05:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit for Applications 8.2",
"product": {
"name": "Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit for Applications"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1784163267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-cli-rhel9@sha256%3Ad466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1784211378"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3Aa72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1784056873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1784056823"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3A8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1784162259"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-hub-rhel9@sha256%3A2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1784059743"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3Ae8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1784210217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3A12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1784162266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-rhel9-operator@sha256%3A3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1784219586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"product_id": "registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-operator-bundle@sha256%3A94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-operator-bundle\u0026tag=1784220119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3Af421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1784059659"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3A4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1784162359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-solution-server-rhel9@sha256%3A21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1784109883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"product": {
"name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mta-ui-rhel9@sha256%3Aa77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1783962515"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1784163267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-cli-rhel9@sha256%3Aecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1784211378"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1784056873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3Ab5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1784056823"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3A8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1784162259"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-hub-rhel9@sha256%3A0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1784059743"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3A60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1784210217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3Aa89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1784162266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-rhel9-operator@sha256%3A957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1784219586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1784059659"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3A25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1784162359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-solution-server-rhel9@sha256%3Af8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1784109883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64",
"product": {
"name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64",
"product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mta-ui-rhel9@sha256%3Af59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1783962515"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64"
},
"product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
"product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
},
"product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-5422",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-02T10:01:06.656531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484037"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jupyter-server. This path traversal vulnerability exists due to insufficient validation of file paths, specifically an incorrect root directory boundary check and improper handling of directory traversal sequences. This allows a remote attacker with low privileges to bypass directory restrictions and gain unauthorized read and write access to files in sibling directories. This could lead to the exposure of sensitive data, particularly in shared hosting environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jupyter-server: jupyter-server: Sensitive data exposure via path traversal vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate vulnerability in jupyter-server allows a remote, low-privileged attacker to bypass directory restrictions. An incorrect root directory boundary check and improper handling of traversal sequences enable unauthorized read and write access to files in sibling directories. This poses a risk of sensitive data exposure, particularly in Red Hat OpenShift AI deployments utilizing shared hosting environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5422"
},
{
"category": "external",
"summary": "RHBZ#2484037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5422",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5422"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5422",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5422"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/24a36953-6490-466f-8cb2-a90d1ca56e0f",
"url": "https://huntr.com/bounties/24a36953-6490-466f-8cb2-a90d1ca56e0f"
}
],
"release_date": "2026-06-02T09:11:15.755000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jupyter-server: jupyter-server: Sensitive data exposure via path traversal vulnerability"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-28684",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-04-20T17:02:18.205732+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459798"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in python-dotenv. A local attacker can exploit this by crafting a symbolic link, which the `set_key()` and `unset_key()` functions in python-dotenv follow when rewriting `.env` files. This can lead to the overwriting of arbitrary files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28684"
},
{
"category": "external",
"summary": "RHBZ#2459798",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459798"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28684",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28684"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28684",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28684"
},
{
"category": "external",
"summary": "https://github.com/theskumar/python-dotenv/commit/790c5c02991100aa1bf41ee5330aca75edc51311",
"url": "https://github.com/theskumar/python-dotenv/commit/790c5c02991100aa1bf41ee5330aca75edc51311"
},
{
"category": "external",
"summary": "https://github.com/theskumar/python-dotenv/releases/tag/v1.2.2",
"url": "https://github.com/theskumar/python-dotenv/releases/tag/v1.2.2"
},
{
"category": "external",
"summary": "https://github.com/theskumar/python-dotenv/security/advisories/GHSA-mf9w-mj56-hr94",
"url": "https://github.com/theskumar/python-dotenv/security/advisories/GHSA-mf9w-mj56-hr94"
}
],
"release_date": "2026-04-20T16:25:12.302000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following"
},
{
"cve": "CVE-2026-33079",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-05-06T18:01:13.818581+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467298"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Mistune, a Markdown parser. This vulnerability, known as Regular Expression Denial of Service (ReDoS), exists in the `LINK_TITLE_RE` regular expression. A remote attacker can exploit this by providing specially crafted Markdown input, which causes the regular expression engine to engage in catastrophic backtracking. This leads to significant CPU consumption, making applications that use Mistune unresponsive and resulting in a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mistune: Mistune: Regular Expression Denial of Service (ReDoS) via crafted Markdown input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Mistune Markdown parser can lead to a denial of service in Red Hat OpenShift AI and Migration Toolkit for Applications. A remote attacker can exploit a Regular Expression Denial of Service (ReDoS) vulnerability by submitting specially crafted Markdown input, causing excessive CPU consumption and rendering affected applications unresponsive. This impact is significant as it directly affects the availability of services that process untrusted Markdown content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33079"
},
{
"category": "external",
"summary": "RHBZ#2467298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33079"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33079",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33079"
},
{
"category": "external",
"summary": "https://github.com/lepture/mistune/blob/df23edd60b43b639d2e6760ef9dd3d618aa11c21/src/mistune/helpers.py#L20-L25",
"url": "https://github.com/lepture/mistune/blob/df23edd60b43b639d2e6760ef9dd3d618aa11c21/src/mistune/helpers.py#L20-L25"
},
{
"category": "external",
"summary": "https://github.com/lepture/mistune/security/advisories/GHSA-8mp2-v27r-99xp",
"url": "https://github.com/lepture/mistune/security/advisories/GHSA-8mp2-v27r-99xp"
}
],
"release_date": "2026-05-06T17:25:09.026000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mistune: Mistune: Regular Expression Denial of Service (ReDoS) via crafted Markdown input"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34993",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-02T20:01:12.690409+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484099"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34993"
},
{
"category": "external",
"summary": "RHBZ#2484099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
"url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
}
],
"release_date": "2026-06-02T18:29:15.847000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
},
{
"cve": "CVE-2026-35397",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-05T20:01:20.132731+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466858"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jupyter Server. An authenticated user can exploit a path traversal vulnerability in the REST API to escape the configured root directory (`root_dir`). By crafting a request to the `/api/contents` endpoint with encoded path components, an attacker can gain access to sibling directories whose names begin with the same prefix as the `root_dir`. This allows the attacker to read, write, and delete files in these accessible sibling directories, potentially leading to unauthorized data access and modification, especially in multi-tenant environments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jupyter-server: Jupyter Server: Unauthorized File Access via Path Traversal Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Jupyter Server enables an authenticated user to bypass their configured root directory via a path traversal vulnerability in the REST API. This allows access to, and manipulation of, files within sibling directories that share a common prefix. The risk is elevated in multi-tenant Red Hat OpenShift AI environments where predictable directory naming conventions are often employed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35397"
},
{
"category": "external",
"summary": "RHBZ#2466858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35397",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35397"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35397",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35397"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-5789-5fc7-67v3",
"url": "https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-5789-5fc7-67v3"
}
],
"release_date": "2026-05-05T19:37:33.810000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that directory names within Jupyter Server deployments do not share common prefixes with sibling directories. This operational control prevents authenticated users from exploiting the path traversal vulnerability to access unauthorized content. For example, avoid naming directories \u0027user1\u0027 and \u0027user10\u0027 if \u0027user\u0027 is a common prefix. This mitigation does not require service restarts or reloads.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jupyter-server: Jupyter Server: Unauthorized File Access via Path Traversal Vulnerability"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40110",
"cwe": {
"id": "CWE-625",
"name": "Permissive Regular Expression"
},
"discovery_date": "2026-05-05T22:01:09.643884+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466912"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jupyter Server. The Origin header validation, which uses Python\u0027s `re.match()` function, does not correctly validate incoming origins against allowed patterns. This allows a remote attacker to bypass Cross-Origin Resource Sharing (CORS) restrictions by crafting a malicious domain that partially matches a trusted one. Consequently, the attacker can make unauthorized cross-origin requests to the Jupyter Server API from an untrusted site, potentially leading to sensitive information disclosure or other unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jupyter-server: Jupyter Server: Cross-Origin Resource Sharing (CORS) bypass via improper Origin header validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40110"
},
{
"category": "external",
"summary": "RHBZ#2466912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466912"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40110"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/commit/057869a327c46730afede3eab0ca2d2e3e74acea",
"url": "https://github.com/jupyter-server/jupyter_server/commit/057869a327c46730afede3eab0ca2d2e3e74acea"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/commit/49b34392feaa97735b3b777e3baf8f22f2a14ed8",
"url": "https://github.com/jupyter-server/jupyter_server/commit/49b34392feaa97735b3b777e3baf8f22f2a14ed8"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/pull/603",
"url": "https://github.com/jupyter-server/jupyter_server/pull/603"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-24qx-w28j-9m6p",
"url": "https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-24qx-w28j-9m6p"
}
],
"release_date": "2026-05-05T21:29:31.323000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Administrators should review and update the `allow_origin_pat` configuration in Jupyter Server to use a more precise regular expression. Ensure the pattern explicitly anchors to the end of the string (e.g., by adding `$` to the end of the regex) to prevent partial domain matches. After modifying the configuration, the Jupyter Server service must be restarted for the changes to take effect.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jupyter-server: Jupyter Server: Cross-Origin Resource Sharing (CORS) bypass via improper Origin header validation"
},
{
"cve": "CVE-2026-40171",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-06T20:00:54.861152+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jupyter Notebook and JupyterLab. A stored cross-site scripting (XSS) vulnerability in the help command linker can be exploited by an attacker who crafts a malicious notebook file. When a user interacts with this file, the XSS is triggered, allowing the attacker to steal authentication tokens. Successful exploitation can lead to a complete takeover of the Jupyter session, enabling arbitrary code execution and information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Jupyter Notebook: JupyterLab: @jupyter-notebook/help-extension: @jupyterlab/help-extension: Jupyter Notebook and JupyterLab: Session takeover via stored cross-site scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Jupyter Notebook and JupyterLab, enabling a stored cross-site scripting (XSS) attack. An attacker can craft a malicious notebook that, with a single user click, can steal authentication tokens and fully compromise the Jupyter session, leading to arbitrary code execution and information disclosure. This impacts Red Hat OpenShift AI and Migration Toolkit for Applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40171"
},
{
"category": "external",
"summary": "RHBZ#2467453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40171"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40171",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40171"
},
{
"category": "external",
"summary": "https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9",
"url": "https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9"
}
],
"release_date": "2026-05-06T19:36:32.072000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "To reduce the risk of exploitation, disable the affected help extensions in Jupyter Notebook and JupyterLab, or set the `allowCommandLinker` option to `false` within the sanitizer configuration. Consult the Jupyter documentation for specific instructions on modifying these settings. Disabling these features may affect the availability of certain help functionalities.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Jupyter Notebook: JupyterLab: @jupyter-notebook/help-extension: @jupyterlab/help-extension: Jupyter Notebook and JupyterLab: Session takeover via stored cross-site scripting"
},
{
"cve": "CVE-2026-42266",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-05-13T16:02:13.807767+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477072"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JupyterLab, an extensible environment for interactive computing. The PyPI Extension Manager, responsible for installing extensions, failed to properly enforce its allow-list of approved extensions. This vulnerability allowed for the installation of unauthorized extensions from sources outside the default PyPI index. Exploitation of this flaw could lead to arbitrary code execution and significant system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jupyterlab: JupyterLab: Arbitrary code execution due to improper enforcement of extension allow-list",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in JupyterLab, as utilized in Red Hat OpenShift AI and Migration Toolkit for Applications, stems from the PyPI Extension Manager\u0027s failure to enforce its extension allow-list. This enables the installation of unauthorized extensions from external sources, potentially leading to arbitrary code execution and significant system compromise within the JupyterLab environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42266"
},
{
"category": "external",
"summary": "RHBZ#2477072",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477072"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42266"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42266",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42266"
},
{
"category": "external",
"summary": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4",
"url": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4"
}
],
"release_date": "2026-05-13T15:08:49.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Upgrade JupyterLab to version 4.5.7 or later.\n\nSet the JupyterLab extension manager to read-only mode to prevent users from installing unauthorized extensions. Note: configuring a PyPI proxy with an allow list of packages is not sufficient to protect against this vulnerability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jupyterlab: JupyterLab: Arbitrary code execution due to improper enforcement of extension allow-list"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42557",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-13T16:02:57.063403+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477086"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jupyterlab. This vulnerability allows a remote attacker to achieve arbitrary code execution by presenting a user with a specially crafted notebook containing a deceptive button in its pre-saved HTML cell output. When the user clicks this button, the CommandLinker component executes arbitrary JupyterLab commands without sufficient validation, leading to the execution of unauthorized code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in JupyterLab allows arbitrary code execution through a deceptive button embedded in a notebook\u0027s HTML output. When a user clicks this specially crafted button, the CommandLinker component executes unauthorized JupyterLab commands, bypassing security validation. This can lead to compromise of the user\u0027s environment, including data loss or denial of service, particularly in Red Hat products utilizing JupyterLab such as Migration Toolkit for Applications and Red Hat OpenShift AI. Exploitation requires user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42557"
},
{
"category": "external",
"summary": "RHBZ#2477086",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477086"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42557",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42557"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42557",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42557"
},
{
"category": "external",
"summary": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg",
"url": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg"
}
],
"release_date": "2026-05-13T15:06:14.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Users should avoid opening or interacting with JupyterLab notebooks from untrusted sources. Exercise caution and verify the origin of any notebook before clicking buttons within its output, as this action could lead to the execution of arbitrary commands.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output"
},
{
"cve": "CVE-2026-42561",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-13T22:01:05.319675+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477309"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in python-multipart. A remote attacker can exploit this denial of service (DoS) vulnerability by sending a specially crafted request with an excessive number of part headers or a single very large header value during multipart/form-data parsing. This can lead to excessive CPU utilization, resulting in a denial of service for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-multipart: python-multipart: Denial of Service via excessive multipart part headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in python-multipart. A remote attacker can trigger excessive CPU utilization by sending specially crafted multipart/form-data requests, leading to service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42561"
},
{
"category": "external",
"summary": "RHBZ#2477309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477309"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42561",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42561"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42561",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42561"
},
{
"category": "external",
"summary": "https://github.com/Kludex/python-multipart/security/advisories/GHSA-pp6c-gr5w-3c5g",
"url": "https://github.com/Kludex/python-multipart/security/advisories/GHSA-pp6c-gr5w-3c5g"
}
],
"release_date": "2026-05-13T20:55:11.767000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-multipart: python-multipart: Denial of Service via excessive multipart part headers"
},
{
"cve": "CVE-2026-44431",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-05-13T17:01:41.663622+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477167"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44431"
},
{
"category": "external",
"summary": "RHBZ#2477167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
}
],
"release_date": "2026-05-13T15:20:24.588000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44727",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-22T21:00:50.127940+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491516"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jupyter Server. The nbconvert HTTP handlers in Jupyter Server render user-authored notebook HTML without a sandbox directive in their Content-Security-Policy. This, combined with nbconvert.HTMLExporter\u0027s default non-sanitizing behavior, allows a notebook containing an HTML payload to trigger a stored Cross-Site Scripting (XSS) vulnerability. A remote attacker could exploit this to gain cookie access, full API authority, and achieve kernel Remote Code Execution (RCE).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jupyter-server: Jupyter Server: Remote Code Execution via stored Cross-Site Scripting in nbconvert handlers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44727"
},
{
"category": "external",
"summary": "RHBZ#2491516",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491516"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44727"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/commit/6cbee8d65e71abac851c4492fea987ad080580bd",
"url": "https://github.com/jupyter-server/jupyter_server/commit/6cbee8d65e71abac851c4492fea987ad080580bd"
},
{
"category": "external",
"summary": "https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-fcw5-x6j4-ccmp",
"url": "https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-fcw5-x6j4-ccmp"
}
],
"release_date": "2026-06-22T19:56:56.776000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jupyter-server: Jupyter Server: Remote Code Execution via stored Cross-Site Scripting in nbconvert handlers"
},
{
"cve": "CVE-2026-44843",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-05-26T21:01:18.783998+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in LangChain, a framework for building agents and large language model (LLM)-powered applications. Older runtime code paths within LangChain deserialize application-controlled payloads using overly broad object allowlists. A remote attacker can exploit this by supplying specially crafted LangChain serialized constructor dictionaries, leading to the instantiation of classes with untrusted arguments. This can result in the disclosure of sensitive information and potential partial compromise of data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "langchain: LangChain: Information disclosure and data integrity compromise via insecure deserialization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in LangChain allows a remote attacker to achieve information disclosure and partial data integrity compromise. The flaw arises from overly broad object allowlists in older runtime code paths, which can deserialize attacker-controlled payloads and instantiate classes with untrusted arguments. Red Hat products integrating LangChain are affected if they process untrusted structured input and utilize deprecated APIs such as RunnableWithMessageHistory, astream_log(), or astream_events(version=\"v1\"), potentially leading to prompt injection or sensitive data exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44843"
},
{
"category": "external",
"summary": "RHBZ#2481695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44843",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44843"
},
{
"category": "external",
"summary": "https://github.com/langchain-ai/langchain/security/advisories/GHSA-pjwx-r37v-7724",
"url": "https://github.com/langchain-ai/langchain/security/advisories/GHSA-pjwx-r37v-7724"
}
],
"release_date": "2026-05-26T19:47:35.328000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using LangChain should avoid passing untrusted structured input directly to load() or loads() functions. Instead, ensure all incoming untrusted data is validated and canonicalized into an inert schema before being processed by LangChain. Additionally, migrate away from deprecated LangChain APIs, including RunnableWithMessageHistory, astream_log(), and astream_events(version=\"v1\"), as these older code paths are more susceptible to insecure deserialization.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "langchain: LangChain: Information disclosure and data integrity compromise via insecure deserialization"
},
{
"cve": "CVE-2026-45292",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-28T17:02:14.674828+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry Java\u0027s baggage propagation, affecting Red Hat products that use OpenTelemetry for telemetry. A remote attacker can exploit this by sending excessively large baggage, leading to uncontrolled memory and CPU usage. The vulnerability\u0027s impact can extend to downstream services due to automatic re-injection of baggage into outgoing requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45292"
},
{
"category": "external",
"summary": "RHBZ#2482785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f",
"url": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/pull/8380",
"url": "https://github.com/open-telemetry/opentelemetry-java/pull/8380"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0",
"url": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx",
"url": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx"
}
],
"release_date": "2026-05-28T16:37:29.490000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
},
{
"cve": "CVE-2026-48710",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-26T23:01:03.204374+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481742"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact is rated as Critical because path-based authentication and access control middleware can be completely bypassed by an unauthenticated remote attacker using a crafted HTTP Host header.\n\nStarlette reconstructs `request.url` by combining the HTTP Host header value with the request path, but performs no validation on the Host header. An attacker can inject path separators or query characters into the Host header (e.g., `Host: example.com/health?x=`), causing `request.url.path` to return a value that differs from the actual HTTP `request path` used for routing. Middleware that enforces authentication or authorization decisions based on `request.url.path` will evaluate the injected path rather than the real one, allowing the attacker to reach protected endpoints.\n\nWith regard to CVSS metrics, the Attack Vector (AV) is Network and Privileges Required (PR) is None, because the attack requires only the ability to send HTTP requests with a crafted Host header. User interaction is not required.\n\nRed Hat Satellite / Insights (IoP): The starlette package is included as a dependency of Connexion, but this flaw is rated Low impact because these services do not use path-based authentication middleware and all services are deployed behind reverse proxies. \n\nOpenShift Lightspeed (OLS): The starlette package is included as a dependency, but this flaw is rated Low impact because authentication is enforced via Kubernetes TokenReview/SubjectAccessReview through FastAPI dependency injection, not path-based middleware; request.url.path is only used for metrics and response header application.\n\nRHOAI Kubeflow Training images: starlette is being used as indirect dependency of mlflow, but this flaw is rated as Low impact because mlflow is used as client library only to store training metrics on remote server, it doesn\u0027t expose any endpoint.\n\nRHOAI odh-automl: The impact is reduced to Low since starlette is only used in the backend and it\u0027s transient dependency and starlette is not used at all to serve any endpoints.\n\nRHOAI odh-kserve-autogluon-server-rhel9: While the Starlette dependency is present in the build, the vulnerable code in starlette is not reachable. This reduces the impact to low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48710"
},
{
"category": "external",
"summary": "RHBZ#2481742",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481742"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48710"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710"
},
{
"category": "external",
"summary": "https://badhost.org",
"url": "https://badhost.org"
},
{
"category": "external",
"summary": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6",
"url": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6"
},
{
"category": "external",
"summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr",
"url": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr"
},
{
"category": "external",
"summary": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml"
},
{
"category": "external",
"summary": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette",
"url": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"
},
{
"category": "external",
"summary": "https://www.secwest.net/starlette",
"url": "https://www.secwest.net/starlette"
},
{
"category": "external",
"summary": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette",
"url": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette"
}
],
"release_date": "2026-05-26T21:54:54.393000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Deploying an RFC-compliant reverse proxy (such as nginx, Apache, HAProxy, or Caddy) in front of the ASGI server will reject malformed Host headers before they reach the application. This is the most straightforward mitigation that does not require code changes.\n\nIf custom middleware is present, it should be updated to use `request.scope[\"path\"]` instead of `request.url.path` for any security decisions. The ASGI scope path is derived from the HTTP request line and is not influenced by the Host header, so it reflects the actual request target.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header"
},
{
"cve": "CVE-2026-48746",
"cwe": {
"id": "CWE-501",
"name": "Trust Boundary Violation"
},
"discovery_date": "2026-06-22T23:00:57.824402+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette\u0027s trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CVE-2026-48746 is an authentication bypass in the vLLM OpenAI-compatible API server. A remote attacker who can reach the vLLM endpoint directly can craft a Host header so the authentication middleware checks a different URL path than the one actually dispatched, bypassing VLLM_API_KEY / --api-key protection. Successful exploitation allows unauthorized inference API access, which can result in confidentiality loss (model/prompt abuse) and availability impact (resource exhaustion). The flaw does not provide integrity compromise or arbitrary code execution. Exploitation requires vLLM API-key authentication to be enabled and the service to be exposed without an RFC-conforming reverse proxy that normalizes the Host header. Because Red Hat AI inference offerings are commonly deployed behind OpenShift Routes or similar proxies, and because the vulnerability is conditional on deployment and configuration, the overall flaw impact is rated Important rather than Critical.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48746"
},
{
"category": "external",
"summary": "RHBZ#2491581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/43426",
"url": "https://github.com/vllm-project/vllm/pull/43426"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6"
},
{
"category": "external",
"summary": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette",
"url": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette"
}
],
"release_date": "2026-06-22T21:57:28.997000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Restrict network access to the vLLM API endpoint to only trusted clients and internal networks. Implement firewall rules or network policies to limit inbound connections to the vLLM service, thereby reducing the attack surface. This operational control helps prevent unauthorized external access to the vulnerable API.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access"
},
{
"cve": "CVE-2026-48990",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T22:00:51.839483+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490168"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in joserfc, a Python library for JSON Object Signing and Encryption (JOSE). This vulnerability allows a remote attacker to cause resource exhaustion, leading to a Denial of Service (DoS), by sending oversized JSON Web Signature (JWS) payloads. The library fails to apply size limits, specifically JWSRegistry.max_payload_length, when processing RFC7797 b64=false JWS payloads.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "joserfc: joserfc: Resource exhaustion via oversized JSON Web Signature (JWS) payloads",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48990"
},
{
"category": "external",
"summary": "RHBZ#2490168",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490168"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48990"
},
{
"category": "external",
"summary": "https://github.com/authlib/joserfc/releases/tag/1.6.7",
"url": "https://github.com/authlib/joserfc/releases/tag/1.6.7"
},
{
"category": "external",
"summary": "https://github.com/authlib/joserfc/security/advisories/GHSA-wphv-vfrh-23q5",
"url": "https://github.com/authlib/joserfc/security/advisories/GHSA-wphv-vfrh-23q5"
}
],
"release_date": "2026-06-17T21:08:10.534000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "The risk can be mitigated by rejecting oversized serialized JWS inputs before they reach joserfc and enforcing strict request/body size limits at the application or reverse-proxy layer.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "joserfc: joserfc: Resource exhaustion via oversized JSON Web Signature (JWS) payloads"
},
{
"cve": "CVE-2026-54283",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-22T18:01:06.194658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491440"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Starlette where the request.form() method silently ignores configured resource limits (max_fields and max_part_size) when parsing application/x-www-form-urlencoded data. An unauthenticated attacker can exploit this by sending a urlencoded request body with an arbitrarily large number of fields or an oversized field, causing denial of service through resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Starlette where the request.form() method silently ignores configured resource limits (max_fields and max_part_size) when parsing application/x-www-form-urlencoded data. An unauthenticated attacker can exploit this by sending a urlencoded request body with an arbitrarily large number of fields or an oversized field, causing denial of service through resource exhaustion. This only affects applications that explicitly call request.form() on urlencoded input; JSON-only APIs and services where Starlette is a transitive dependency not used for form parsing are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54283"
},
{
"category": "external",
"summary": "RHBZ#2491440",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491440"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54283"
},
{
"category": "external",
"summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq",
"url": "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq"
}
],
"release_date": "2026-06-22T16:46:16.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS"
},
{
"cve": "CVE-2026-59939",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-08T20:02:11.756520+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498212"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in httplib2, a Python HTTP client library. This vulnerability allows a malicious or compromised HTTP server to send a small compressed data payload that, when decompressed by httplib2, expands to an extremely large size in memory. This unbounded decompression can lead to a Denial of Service (DoS) by causing the client application to run out of memory and crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `httplib2` allows a remote attacker to trigger a Denial of Service (DoS) in client applications. By sending a specially crafted, compressed HTTP response, a malicious server can cause the client to exhaust its memory due to unbounded decompression, leading to application crashes. This poses a significant risk to Red Hat products that use `httplib2` to process untrusted HTTP content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59939"
},
{
"category": "external",
"summary": "RHBZ#2498212",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498212"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59939"
},
{
"category": "external",
"summary": "https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427",
"url": "https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427"
},
{
"category": "external",
"summary": "https://github.com/httplib2/httplib2/releases/tag/v0.32.0",
"url": "https://github.com/httplib2/httplib2/releases/tag/v0.32.0"
},
{
"category": "external",
"summary": "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3",
"url": "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3"
}
],
"release_date": "2026-07-08T19:34:05.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:10:10+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:d466bf042711b13fc53cbc561b70e4f58cd77f8a05d1d4ee10c10a6e1c201fe7_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:ecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:7377a2c2f16ca436819cbbf106fc27d3a8c44c7fca0a44108ccc826bf8678ace_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:a72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:794180378ddb9a88001d76b849df305034924683a79ef145f744fe03bee9c32b_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:b5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8e5ba3659ef5f88b81c1c9d795b6af6048fd7d870493ce5f013efcb9fce90b9d_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:0223927b9e584f302aabafdbf015a779b14c9b5816cf0baa0cb1bfe0b1cc3415_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:60c4a45085db3517f6a9bae32a4b93fd2dfa799c3e957776ad2d8ab0777507c2_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:e8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12883516af95bf0f6abad1556d22896f16a087c1e4191fedc1f5d689cf6d67f6_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:a89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:647ca556be4338749fbe7cb18580466ce6155bfce17c96deda7b7c037fd16240_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:f421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:25618ee8a690f336e1604a1b1ca9dd5197bbdea5cd02cfaf588fbd950a8fd228_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:3926f791376886972749cae0f8eb635af67a088811214066c6deb010c6b762f0_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:a77f5a731c20943958b5f654bf3147b690d5dd608b794bff261a23dd89f785f1_amd64",
"Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies"
}
]
}
RHSA-2026:44239
Vulnerability from csaf_redhat - Published: 2026-07-28 07:31 - Updated: 2026-07-28 13:05Summary
Red Hat Security Advisory: OpenShift Container Platform 4.22.7 security and extras update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.22.7 is now available with updates to packages and images that fix several bugs.
This release includes a security update for Red Hat OpenShift Container Platform 4.22.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.22.7. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHSA-2026:44237
Security Fix(es):
* golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
* fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization (CVE-2026-13676)
* brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
190 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
190 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
191 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
191 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64 | — |
Workaround
|
Threats
Impact
Important
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.22.7 is now available with updates to packages and images that fix several bugs.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.22.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.22.7. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:44237\n\nSecurity Fix(es):\n\n* golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n* fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization (CVE-2026-13676)\n* brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)\n* golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:44239",
"url": "https://access.redhat.com/errata/RHSA-2026:44239"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_44239.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.22.7 security and extras update",
"tracking": {
"current_release_date": "2026-07-28T13:05:36+00:00",
"generator": {
"date": "2026-07-28T13:05:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:44239",
"initial_release_date": "2026-07-28T07:31:50+00:00",
"revision_history": [
{
"date": "2026-07-28T07:31:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-28T07:33:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-28T13:05:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.22",
"product": {
"name": "Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.22::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-event-proxy-rhel9@sha256%3A8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9\u0026tag=1784699330"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-nfd-rhel9-operator@sha256%3Af331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator\u0026tag=1784699346"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9@sha256%3A17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9\u0026tag=1784700523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9-operator@sha256%3A21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator\u0026tag=1784700124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-cni-rhel9@sha256%3Af9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-cni-rhel9\u0026tag=1784699382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-daemon-rhel9@sha256%3A94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-daemon-rhel9\u0026tag=1784700126"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-intel-ipu-p4sdk-rhel9@sha256%3A479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9\u0026tag=1784720230"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-intel-ipu-vsp-rhel9@sha256%3A5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9\u0026tag=1784699604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-intel-netsec-vsp-rhel9@sha256%3A24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9\u0026tag=1784699651"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-marvell-cp-agent-rhel9@sha256%3A1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9\u0026tag=1784699416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-marvell-vsp-rhel9@sha256%3A70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9\u0026tag=1784699357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-network-resources-injector-rhel9@sha256%3A5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9\u0026tag=1784699341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-rhel9-operator@sha256%3A00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-rhel9-operator\u0026tag=1784720076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-infiniband-cni-rhel9@sha256%3Abc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9\u0026tag=1784700559"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9@sha256%3A7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9\u0026tag=1784700254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9-operator@sha256%3Ab92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator\u0026tag=1784701205"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"product": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"product_id": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kube-compare-artifacts-rhel9@sha256%3A42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/kube-compare-artifacts-rhel9\u0026tag=1784702383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ptp-rhel9@sha256%3Ae45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-rhel9\u0026tag=1784700012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1784699956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3A2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1784702451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3Abe012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1784701313"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"product": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"product_id": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/nmstate-console-plugin-rhel9@sha256%3Adad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/nmstate-console-plugin-rhel9\u0026tag=1784729919"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-node-feature-discovery-rhel9@sha256%3Aa67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9\u0026tag=1784699356"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ansible-rhel9-operator@sha256%3Af0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-rhel9-operator\u0026tag=1784720117"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-capacity-rhel9@sha256%3A08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity-rhel9\u0026tag=1784700965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"product_id": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-helm-rhel9-operator@sha256%3A7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-helm-rhel9-operator\u0026tag=1784699431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel9@sha256%3A01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9\u0026tag=1784700533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"product": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kubernetes-nmstate-rhel9-operator@sha256%3Ad98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator\u0026tag=1784728664"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-container-rhel9@sha256%3A3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9\u0026tag=1784700261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-rhel9-operator@sha256%3Acaf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator\u0026tag=1784720160"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel9@sha256%3Ad504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9\u0026tag=1784700020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel9-operator@sha256%3A89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator\u0026tag=1784699332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9@sha256%3A77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9-operator@sha256%3Ab2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9-operator\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9@sha256%3A854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9\u0026tag=1784699536"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9-operator@sha256%3A749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator\u0026tag=1784699334"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-mustgather-rhel9@sha256%3Ab1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9\u0026tag=1784702447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9@sha256%3Ad0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9\u0026tag=1784700148"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9-operator@sha256%3Add83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator\u0026tag=1784699487"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-metrics-exporter-rhel9@sha256%3A9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9\u0026tag=1784699928"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-rdma-cni-rhel9@sha256%3A3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9\u0026tag=1784700008"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"product_id": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-support-log-gather-rhel9-operator@sha256%3Ad4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator\u0026tag=1784700624"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9@sha256%3A6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9\u0026tag=1784699909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9-operator@sha256%3A4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9-operator\u0026tag=1784700468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ptp-rhel9-operator@sha256%3A0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-rhel9-operator\u0026tag=1784699357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"product_id": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ptp-must-gather-rhel9@sha256%3A7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ptp-must-gather-rhel9\u0026tag=1784702391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64",
"product_id": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/sriov-cni-rhel9@sha256%3Ae6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/sriov-cni-rhel9\u0026tag=1784699831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller-rhel9@sha256%3Ac0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9\u0026tag=1784699951"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-config-daemon-rhel9@sha256%3A6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9\u0026tag=1784700101"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-device-plugin-rhel9@sha256%3A3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9\u0026tag=1784700561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-rhel9-operator@sha256%3A2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator\u0026tag=1784701360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-webhook-rhel9@sha256%3A4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9\u0026tag=1784700384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9@sha256%3A52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9\u0026tag=1784700654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9-operator@sha256%3A709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator\u0026tag=1784700246"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-event-proxy-rhel9@sha256%3Af7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9\u0026tag=1784699330"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-nfd-rhel9-operator@sha256%3Afc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator\u0026tag=1784699346"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9@sha256%3A67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9\u0026tag=1784700523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9-operator@sha256%3A5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator\u0026tag=1784700124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-cni-rhel9@sha256%3Abb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-cni-rhel9\u0026tag=1784699382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-daemon-rhel9@sha256%3Ac46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-daemon-rhel9\u0026tag=1784700126"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-intel-ipu-p4sdk-rhel9@sha256%3A00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9\u0026tag=1784720230"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-intel-ipu-vsp-rhel9@sha256%3A9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9\u0026tag=1784699604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-intel-netsec-vsp-rhel9@sha256%3A7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9\u0026tag=1784699651"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-marvell-cp-agent-rhel9@sha256%3Af22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9\u0026tag=1784699416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-marvell-vsp-rhel9@sha256%3Ac25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9\u0026tag=1784699357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-network-resources-injector-rhel9@sha256%3A73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9\u0026tag=1784699341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"product_id": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-rhel9-operator@sha256%3A672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-rhel9-operator\u0026tag=1784720076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-infiniband-cni-rhel9@sha256%3Ac39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9\u0026tag=1784700559"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9@sha256%3Ad98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9\u0026tag=1784700254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9-operator@sha256%3A0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator\u0026tag=1784701205"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"product": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"product_id": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kube-compare-artifacts-rhel9@sha256%3A1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/kube-compare-artifacts-rhel9\u0026tag=1784702383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ptp-rhel9@sha256%3A28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-rhel9\u0026tag=1784700012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1784699956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3A03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1784702451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3Acf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1784701313"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"product": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"product_id": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/nmstate-console-plugin-rhel9@sha256%3Ac504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/nmstate-console-plugin-rhel9\u0026tag=1784729919"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-node-feature-discovery-rhel9@sha256%3A51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9\u0026tag=1784699356"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ansible-rhel9-operator@sha256%3A3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-rhel9-operator\u0026tag=1784720117"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-capacity-rhel9@sha256%3A8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity-rhel9\u0026tag=1784700965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"product_id": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-helm-rhel9-operator@sha256%3A94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-helm-rhel9-operator\u0026tag=1784699431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel9@sha256%3A1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9\u0026tag=1784700533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kubernetes-nmstate-rhel9-operator@sha256%3A35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator\u0026tag=1784728664"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-container-rhel9@sha256%3A64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9\u0026tag=1784700261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-rhel9-operator@sha256%3Ac923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator\u0026tag=1784720160"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel9@sha256%3Aaffe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9\u0026tag=1784700020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel9-operator@sha256%3A88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator\u0026tag=1784699332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9@sha256%3Aeb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9-operator@sha256%3A413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9-operator\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9@sha256%3Ab14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9\u0026tag=1784699536"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9-operator@sha256%3A918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator\u0026tag=1784699334"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-mustgather-rhel9@sha256%3Ab4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9\u0026tag=1784702447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9@sha256%3A02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9\u0026tag=1784700148"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9-operator@sha256%3Ab025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator\u0026tag=1784699487"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-metrics-exporter-rhel9@sha256%3Ab07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9\u0026tag=1784699928"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-rdma-cni-rhel9@sha256%3A441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9\u0026tag=1784700008"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"product_id": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-support-log-gather-rhel9-operator@sha256%3Ae3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator\u0026tag=1784700624"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9@sha256%3Adabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9\u0026tag=1784699909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9-operator@sha256%3A3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9-operator\u0026tag=1784700468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ptp-rhel9-operator@sha256%3A7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-rhel9-operator\u0026tag=1784699357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"product_id": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ptp-must-gather-rhel9@sha256%3A0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ptp-must-gather-rhel9\u0026tag=1784702391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"product": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"product_id": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/sriov-cni-rhel9@sha256%3Ac3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/sriov-cni-rhel9\u0026tag=1784699831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller-rhel9@sha256%3A801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9\u0026tag=1784699951"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-config-daemon-rhel9@sha256%3Ad79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9\u0026tag=1784700101"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-device-plugin-rhel9@sha256%3Ab4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9\u0026tag=1784700561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-rhel9-operator@sha256%3A8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator\u0026tag=1784701360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-webhook-rhel9@sha256%3A733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9\u0026tag=1784700384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9@sha256%3A5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9\u0026tag=1784700654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9-operator@sha256%3Abd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator\u0026tag=1784700246"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-event-proxy-rhel9@sha256%3A17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9\u0026tag=1784699330"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-nfd-rhel9-operator@sha256%3A7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator\u0026tag=1784699346"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9@sha256%3A61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9\u0026tag=1784700523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9-operator@sha256%3A7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator\u0026tag=1784700124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-cni-rhel9@sha256%3A4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-cni-rhel9\u0026tag=1784699382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-daemon-rhel9@sha256%3Ad22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-daemon-rhel9\u0026tag=1784700126"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-rhel9-operator@sha256%3Add6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-rhel9-operator\u0026tag=1784720076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-infiniband-cni-rhel9@sha256%3A09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9\u0026tag=1784700559"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9@sha256%3Afc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9\u0026tag=1784700254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9-operator@sha256%3A7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator\u0026tag=1784701205"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"product_id": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kube-compare-artifacts-rhel9@sha256%3A216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/kube-compare-artifacts-rhel9\u0026tag=1784702383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ptp-rhel9@sha256%3Aea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-rhel9\u0026tag=1784700012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1784699956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3A53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1784702451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3A4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1784701313"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"product_id": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/nmstate-console-plugin-rhel9@sha256%3A0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/nmstate-console-plugin-rhel9\u0026tag=1784729919"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-node-feature-discovery-rhel9@sha256%3Ae773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9\u0026tag=1784699356"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ansible-rhel9-operator@sha256%3Adbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-rhel9-operator\u0026tag=1784720117"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-capacity-rhel9@sha256%3A346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity-rhel9\u0026tag=1784700965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-helm-rhel9-operator@sha256%3Adae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-helm-rhel9-operator\u0026tag=1784699431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel9@sha256%3A5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9\u0026tag=1784700533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kubernetes-nmstate-rhel9-operator@sha256%3A242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator\u0026tag=1784728664"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel9@sha256%3A82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9\u0026tag=1784700020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel9-operator@sha256%3Af1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator\u0026tag=1784699332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9@sha256%3A870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9-operator@sha256%3A59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9-operator\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9@sha256%3Ae729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9\u0026tag=1784699536"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9-operator@sha256%3Aa601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator\u0026tag=1784699334"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-mustgather-rhel9@sha256%3A7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9\u0026tag=1784702447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9@sha256%3Aa2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9\u0026tag=1784700148"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9-operator@sha256%3Aab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator\u0026tag=1784699487"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-metrics-exporter-rhel9@sha256%3A65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9\u0026tag=1784699928"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-rdma-cni-rhel9@sha256%3A9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9\u0026tag=1784700008"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-support-log-gather-rhel9-operator@sha256%3Addbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator\u0026tag=1784700624"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9@sha256%3Af04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9\u0026tag=1784699909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9-operator@sha256%3A9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9-operator\u0026tag=1784700468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ptp-rhel9-operator@sha256%3Adcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-rhel9-operator\u0026tag=1784699357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"product_id": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ptp-must-gather-rhel9@sha256%3Adbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ptp-must-gather-rhel9\u0026tag=1784702391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"product_id": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/sriov-cni-rhel9@sha256%3Ab422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/sriov-cni-rhel9\u0026tag=1784699831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller-rhel9@sha256%3A2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9\u0026tag=1784699951"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-config-daemon-rhel9@sha256%3A125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9\u0026tag=1784700101"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-device-plugin-rhel9@sha256%3Adba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9\u0026tag=1784700561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-rhel9-operator@sha256%3A753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator\u0026tag=1784701360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-webhook-rhel9@sha256%3A41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9\u0026tag=1784700384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9@sha256%3A989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9\u0026tag=1784700654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9-operator@sha256%3Ac226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator\u0026tag=1784700246"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-nfd-rhel9-operator@sha256%3A5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator\u0026tag=1784699346"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9@sha256%3Ab30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9\u0026tag=1784700523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel9-operator@sha256%3Afefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator\u0026tag=1784700124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"product_id": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-cni-rhel9@sha256%3A41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-cni-rhel9\u0026tag=1784699382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"product_id": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-daemon-rhel9@sha256%3Ab5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-daemon-rhel9\u0026tag=1784700126"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"product_id": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-dpu-rhel9-operator@sha256%3A58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-dpu-rhel9-operator\u0026tag=1784720076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-infiniband-cni-rhel9@sha256%3A8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9\u0026tag=1784700559"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9@sha256%3A163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9\u0026tag=1784700254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"product_id": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ingress-node-firewall-rhel9-operator@sha256%3A299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator\u0026tag=1784701205"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"product": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"product_id": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kube-compare-artifacts-rhel9@sha256%3Ae48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/kube-compare-artifacts-rhel9\u0026tag=1784702383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1784699956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3A1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1784702451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3Adbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1784701313"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"product": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"product_id": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/nmstate-console-plugin-rhel9@sha256%3Aafc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/nmstate-console-plugin-rhel9\u0026tag=1784729919"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-node-feature-discovery-rhel9@sha256%3Ae7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9\u0026tag=1784699356"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"product_id": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ansible-rhel9-operator@sha256%3A47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-rhel9-operator\u0026tag=1784720117"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-capacity-rhel9@sha256%3A197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity-rhel9\u0026tag=1784700965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"product_id": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-helm-rhel9-operator@sha256%3Ac82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-helm-rhel9-operator\u0026tag=1784699431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel9@sha256%3A5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9\u0026tag=1784700533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"product": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/kubernetes-nmstate-rhel9-operator@sha256%3Ad42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator\u0026tag=1784728664"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9@sha256%3A1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"product": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"product_id": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/metallb-rhel9-operator@sha256%3A04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel9-operator\u0026tag=1784699354"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9@sha256%3A029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9\u0026tag=1784699536"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-driver-rhel9-operator@sha256%3Acc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator\u0026tag=1784699334"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"product_id": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-secrets-store-csi-mustgather-rhel9@sha256%3A645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9\u0026tag=1784702447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9@sha256%3A836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9\u0026tag=1784700148"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"product_id": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-smb-csi-driver-rhel9-operator@sha256%3Aa01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator\u0026tag=1784699487"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-metrics-exporter-rhel9@sha256%3Acd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9\u0026tag=1784699928"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-rdma-cni-rhel9@sha256%3Aea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9\u0026tag=1784700008"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"product_id": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-support-log-gather-rhel9-operator@sha256%3Adbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator\u0026tag=1784700624"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9@sha256%3A1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9\u0026tag=1784699909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"product_id": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/pf-status-relay-rhel9-operator@sha256%3A9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/pf-status-relay-rhel9-operator\u0026tag=1784700468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"product": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"product_id": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/sriov-cni-rhel9@sha256%3A3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/sriov-cni-rhel9\u0026tag=1784699831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller-rhel9@sha256%3A1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9\u0026tag=1784699951"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-config-daemon-rhel9@sha256%3A7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9\u0026tag=1784700101"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-device-plugin-rhel9@sha256%3A35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9\u0026tag=1784700561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-rhel9-operator@sha256%3A504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator\u0026tag=1784701360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-sriov-network-webhook-rhel9@sha256%3A3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9\u0026tag=1784700384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9@sha256%3Aeb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9\u0026tag=1784700654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel9-operator@sha256%3A2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator\u0026tag=1784700246"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64"
},
"product_reference": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64"
},
"product_reference": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x"
},
"product_reference": "registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x"
},
"product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64"
},
"product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64"
},
"product_reference": "registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x"
},
"product_reference": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64"
},
"product_reference": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64"
},
"product_reference": "registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x"
},
"product_reference": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64"
},
"product_reference": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
"product_id": "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.22"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T07:31:50+00:00",
"details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44239"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T07:31:50+00:00",
"details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44239"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T07:31:50+00:00",
"details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44239"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T07:31:50+00:00",
"details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44239"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:0201194d2e390155629d4fab31f6d90165e19ccdd5310cedd37d97910507532a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:299a53f075f4f6c6fbdb710c02f05d56c1dcce9e05679681be7d1aff24f5a844_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7fffeefafa8d1f7d545c89b59de436f5e6d533fa2b893d3708c5fce8f595e170_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:b92141038384c6bb452b6d4e1737c985c1d30262438865f3090a9eca550b7400_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:163cc26a1e70c5d9c81f110a84c6e544570e2d68ed0fa0794fe45d6a6cdad8cf_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7befbf51c45be9849ef12bf35db616a496a16dc8c206c249f568d9cfe0357bb8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d98b325f816ee9a8b79eb67e53d433577b7d9637def144f0a43d08a20b358169_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:fc372aa32f2f7009d0812f40360daa57506e6bc9f1146f989842c1bc8ae9aa39_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:1d2bff05e4bed04b5c5f4ac75834b11e16313226fbb2df6d168a6f9eca96e1cb_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:216cf7e29212e1b120cb0e8fcd75cbe04fe4c708b1142e17cdcd6322a6f2c58a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:42664ce5ab2f0d9dac5cd5ce32b31660b5d63ae23a1fe6cd3a00d38edd401d00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e48931caf72c37ff17dfb9871bdb5f6897380ebb6b5b1dba41ad8484c010b62d_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:242825ffe582aca687c126a4e5b92a553e15e5b67ae7fe7c133b485eadd46fbd_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:35ab69c40cf8d12545371c9562bdb2ee04f4a4d32275f110fcce80bb2844dc6a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d42d6cb868fb00600d6271cd835b8bc74f2725bd7856cf28e5b201d487e36959_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d98f83716b319a50c49a0a6ec7604680e60863fb6efbd72aef266fb538af28d1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:04a83ac6ac76b654d32af11fb88f15125615a0f2cffc22d49cfb52253f6241cd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:413c874a326eca4769592330dcdc60fb777a6171625d782cd57feee2c2756e64_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:59631ace37256bcc614825d7cd11d0c6c438a2e79563d4e7f2494e418019f117_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:b2ea576739cd0e8bb557d3329012192487fd47073865e4d734cdca9fbd2c081d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:1db405a10a565b1e225d466d8d3fd954c3eccfb99eac7e1705a74256e6094088_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:77b77d03b294209e355388672bc3a59824803235194354de3151cae41a574057_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:870859316f6e9a4ef609966c29264de3ec295f002d94bab5d24d7df34cbe12c1_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/metallb-rhel9@sha256:eb7be2343aead01385980e17b5abded8613ba8cbb82f365763b1a5fe76b84e53_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0251690607374aa68e793df00ac8e9c574866769b42ecbdc5665f5d4f8019e2a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:afc69bae101ba15c4df0d4be197a103797e9035a6014d3f186cf735ac3c07934_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:c504997db613f08299ff86d94c5e45e84cd8657b2c09b48621b2747a9f101531_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dad0ad54658546d93fc3f691cd3934dd4354e17435edad4297aa94ae40e4b0d4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3f0f49cb60d645dc63a27f7c64ecb90bd8a0de8fa2cb62983a1b21048f65e5a4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:47ad06055b15e21d1ac8955a71d775c9678ba63766416131e70a3e08d256bada_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:dbfd23a224f1a238534fc608ee4879ae9c2441785b3525472df984f0d6ee3145_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f0756a3e510f82c7164a5af38423650283eebed26f139515fb1819c1376a5cf0_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:3ec0a693d7cb84fa1c8fd966cdcc1f2d4f912b41bb269ca325a9e44fb87ab9cb_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:64dd23ef888301e2d2b6781e6427c835c900fc80095fd7fd3735f4ad88617373_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c923676c6c3a0c51526165c3fb329fb547461d9068f8c860350163966bcec72a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:caf9495d0e0dad2a94e2f0423a15c26c9177b727e67bacace26467e44a3fd1c7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:17f865f0cf1fa6cc9add37c8b022f00d465091da3e8304d0a6ae153372683da2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:8821be1fd659fe87b62bf18baef96fd2c2c0f7411d1a1fe96633241ab3be99d6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9@sha256:f7716e0c406a6f43b4d43437aeeb9b49c5c0e7b06d24b05c1db254f45d935f93_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:08c876478b2eff40eee2efe8fdae79efafd6db03c0108336e5834eb29d2ddd45_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:197bac1f0111f90d788579892f120431182aedd619a172cd28077c5412a64a67_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:346461d96a0a9e2a20520612afd632f5422b2eb8e88064268987d5a75326fe8f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:8a0f3726f445c5370a04bd7325e273888447d285bc178cedca0a16d39a6731b7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:5f74f4ad5dde97c0ea85cba93beab723e51d0b463575c6276912b105e9355f48_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7121341532a3c0761fb880af06d837eaaea8682beb914c6567c93214dc3e389d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:f331397666858102b156a39c84866ff7231d3da5e9c179ff99b4aab34c31393d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:fc1e853a56e4ad00becde2948d9b86fdad89bebdb76713288a72032bcbfc0713_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:21929fc3d2bd2dfec9025dc8aaa36405ae22c40ed3cba7a4e108a06cd30556f6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5369ad7aa42882fc37bae32ed18508b94fbfb8479b0f63d823fec98cf079df48_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:7c713e798f6bf18c65c9dc2bccb2e1392d6f8e5a65c90932bf4b83ee96fcea11_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fefa156e6eb87fd913e5110b0c3b375d6d92042825c718b7af38e285b4c47519_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:17c64bc3307f98cf07a07ac28909c969babc584dfe970c450fbc041f37ad5cb2_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:61ecbc18c80fafd0e373d0d4814bb6f67d2ea55c9007d4c1b1640f495cd5fe58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:67214e21c64531882e1c62bb738f1ff5ff054a621376a6d65c3b687ea5e6bc0f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:b30fa74c4fb6515e2f16a06537766856797b9281374ce460ec380e53ba12dbcb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:41e1a3fee844d326d1d6a47f7c88ee262b049e9a8045811c53a121fc49bafe3a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:4b16cdac368bdb396aeb39881b72c7151c3d6b7ece106c85a0454ae38cffe95a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:bb04e87eb7981bf2bdd3af0e3c52b95a6ebb62845d8c62716e962198828bfa5f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-cni-rhel9@sha256:f9ea4bf70f69bc96b32e0b8cd6093463dbae0305a43ab0d1b1b8dc59cb322673_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:94a6923ab4d9d48d73706db8f48eb8cb029080e3a4faba944ca4d25a179ffbe9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:b5ff2080804ff0972464ac0e8caea06e7a3d8c39e78e0561b25bcb87b2da8480_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:c46c17d1e395fc3fc5154e03933b755849361ffe0d645d0205ae90b7d3f3821f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:d22c6139d8f41732642cbca2f1cf56ecd3d4a910b3b4f4ab8fd6b119c5393672_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:00c777877080614a2ca132a8ff722581e71770fc3ce3c794b3c3405d0ccd92e2_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-p4sdk-rhel9@sha256:479ccccbbeec2e83db39b836efe8e851cbe73773dd341fc2301f626ac073d25f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:5f07eb6cecf855a2f6885e6cabb0a41644f6f790a12a1967152247333c450ed7_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:9845e19f63bc8b66cf9f602f1557a3c5460a461f2747d66742ab5e9fe7843226_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:24ed01e36817dd96abeb3045f046d662b75174d01015965f50813edf1a8bfd62_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-intel-netsec-vsp-rhel9@sha256:7a72252458c2d9b6db3cc2dbe47fbf00201a48e1fdc428f4cb6b34de94d666f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:1c57ba31a775687152b345ed4e4c2074459298e195f5a0984179f44a9f92a5bf_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-cp-agent-rhel9@sha256:f22cda8cdefc0d1f443fd00a2c332f2fee96b67459efc8b54e52ce7da746940a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:70800c85375c3036343534126bbe110cf493e75bf90c316b9f83ade5b118f94a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-marvell-vsp-rhel9@sha256:c25ef92fc99961cd06ab52117f8b3aefb0ec96bb765f4fcd088c8317b8e3d3e8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:5bef15dff7c86e7dd93ab2b7bc26c2dbbd3f44d37c245897c68d8d5cd54b00e3_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-network-resources-injector-rhel9@sha256:73714fff768d13d82a922e7bcbced39c6e667e675aa5c6f51fbebda7fdf72e45_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:00ca572f27e78c0330d23942f2a80366d83aae885483d1453101ebcb8494b0db_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:58a10079e94b7c3063129f4d583ff90576bc4e60ab62e082a72048bf1c39af3c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:672a106c3ee67b8653aa5b6fe3d1651a624f9106ee8cfc21909de78673327114_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:dd6beabcb8851c4e3f8f4523ba5819cf1ac315900d5525de468b7db402e383be_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:88a812b9f48bb7acb59aed3f55ad006859edf2a988e239f36380eaf612da6ec4_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:89be6f9d421685929ca9b62fad8dda29e111f5c568dc49466b2699e3920119ba_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:f1f2ca2d3dd101280218bbba5969479532502cd3eb84ea9ac6bb11e67999d51c_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:82334f407619b87b39e3d5c8bdca23b0da2afbfa719368727b7de83d656d3f31_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:affe4d4a413ace3b4ce59557937fe64780bba61799505171300cc459f4cda9f3_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:d504665c930770ce5fb7aa9a19dfbb28aa1508e40b7f090da258f1b25d4c4525_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:7d1e4796b14874bbdad6bbe90ed73cb371300ca73ce27a78b5ceb0500fcb4ce4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:94235bb15d6fec223f893d78c60c681cf7f2ffae677aa3ce3f40d00735a288f7_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:c82c6884aa7d1727831b290c9b6edb71cf90ac7c8aeb1d5d6ec9821760120052_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:dae5d52fe9e5e29727887647b831b0c0c2c5ff36e0544deea353f748e5ca1f10_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:01613874b4fe2289d68961a611cee88385a6ddc8862b07553a3c8c547eaa7a00_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:1e03e2df506285a2e3a7059c7f632aefbaf50c71a9fa240d3e0bda273c0eebdd_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5b12d96fff57fb8e2ef81db589139a64b679b15398d80e774f439d6e2ae259a3_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:5df206e287d500f005e64d0c6ac8ef63420c81b0ada4069d243a6b340f07e369_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:059e2492ca950c26f978995302a25244e2b527b9eef18308a3331eb63b2cf758_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:50666b38cdea1b85172df4c8930547626ac85580178e0199483e24956e055018_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:6b290a80f41c717bb04d3aa88a9f89bc862caf78915e6ac5e2746c63beb70af0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:91c42ebc9d15ce47d671252b6037760ff57c028c2514f8337a97d179f17c846d_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:03038492e48b1077b592da38e0a4ac060e829225433403ad499e7d92b358df4e_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:1375e0fcb45ca74220c4bb67ac605969abbd8ce5ccfd1cbbd1db4ff134b3002c_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:2504d6bd37f12d0652e603bee9392f9236520da2a3a1676176dcf66c0e329ff8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:53bcfcc62efd201db44d1b2e8330ae57ed955f880e35eb97a5d1033c6f733b25_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:4f75075073dff6e1ddaecbb89ca554c75d93f1cd579adff2edfca12a636dd27b_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:be012d3841a7a224fcf7d113aa88bad6786b1a9022dbb71c95d594e42a358541_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:cf8dcd467bc04939e092a4bffa744c77e1900b20897a02d6744d1774c3bf2727_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:dbcc495263b5d63cdda63d60d80c66604c01381f208e50df8766b19c60ca9eca_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:51f7d852f545cd195d242792b1c16056b6332abc48f6cc211ea4b1767767ac61_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a67e3c410f9673e025a9809813f113621928eb0dbf1650608049ab8024c4039e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e773ee5f0418686939ba92c503fde2fd2e7d13b58759977ccadeadcd9f43a09a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:e7acbc4302abf380fd7fbe7b5b3b56a4e33af7371a2e72cd6beb04fa62aa2c9e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:0552fd0938bc8b6a66419a4e4d5d24f9347ab00106bde0d35a4d522bbf25f004_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:7a330668367da5780e1ca181d7225f6f35faea8258c35ee22a26b12c34ac292f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:dcfe19b5cc317d1fe2d88e7a8f239a7b3f9509dc0b90cf72d5eee7eeaa6cb278_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:28b9b649ac8ed89235c2dedc9c61521773f46aa73dac31a17b6ce8ba3a806cf9_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:e45d56c4538cffe8d23676fe8303d7dd1f99792d50cc8f9b281c0a4af41c557e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-ptp-rhel9@sha256:ea2fce5073d70d81a26546b75c5bc20b062d0019d1bcd31603fc662f30abb89d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:749b97c52b167f06ed6265a3f22df58087cf106d6cbbf7056caee79e0e38ffaa_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:918d4d7e2983d674022474a66e0ef465109cfd11220b516c6f6904e2c8332db0_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a601e7469bfbdf8762c333cfb26cb9c8b4a686e1a9f736c53121047f0a6394af_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:cc6da7b2796138ebca6469f37c1aec18464943c589fabeb18e2c8c4653b399bd_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:029e45b9263adde42a2fe3b10d67e3f7b261f16d0e5178339580b34431c95b85_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:854242a94a570663de03aa06cd86e4daf1dc6a55737d74ff7c8e03a96c5d301e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b14a7bc3f27c9adf50bc46c0a8bbffb4e145ea33806cbcb60e10366dc07ad097_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:e729ec1ed41738a912e76820c2d459d9267240c6f8879db5059af120387caf82_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:645c5c5839e233098bb6cc03a51a775f2cb87779f11de5630a1e365cadff6c16_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:7b80f32d2cfaa687b7a7d6b75705a076f9b15517879e63c03f529553dcd221a7_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b1d1e9745c0697396d0fdead63fedd421774c3b78752e743c154dbc8edb1690e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:b4c1d34d0cb590a47b12d5ba36b33c0f0f22ebfcd1579c917c194bc9937dfd4f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:a01ba8576d44314e9d9c075ca9e401c641677e79675a526e72d6a2e01ab04377_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:ab37186f26b564691f38e3fd2f62776d2476b7a5f21925fc64a22fafadd7bc6f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:b025ccf05ee0ac46a66dede5f07338c46b854215e158d280fc27c63899463b2b_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:dd83fb7df16d0331c621f84809cb99f700e87c1fc906445ebc8150307d77bea4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:02d39917ed740c33ee2668cf821f13ed110da23428ec81b8ecbbb179d0b19c1f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:836a0461a52d382e04fddbb08091dbd9375e85d0d03d72bbf3058dc819fb445a_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:a2804e99adcb94abb2f196849d871260de5bbe424811f8a6b5bc325c9272aa7f_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:d0091326ee7cfc3f36cbafe4ffec1ca5c5d2e0e006ea5c4c945280b24df5867f_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:1e906b41ad7e50b122b99aa98653f9b983343d8961509b623701dfde9fbc7ae9_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:2a8308416d710cc8ddf548ac808ce91e23c79e47f95374db07aa57f5d0652b8a_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:801f7f1908211b45dd7f7607423906e484b86fd0f3e70d8ca7dba0eec4ddc70a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c0a7e7107e3c47de618184087933c24b385e72d90d86f4f4f0558991d9b800f8_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:09c7cf40257624936bba8853944f5bf64af86902c24738666ea4aa98cd00fb73_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:8280bbb007d7f681f84275ceff06f57e3cb33ad682f9ea139c622837357d89a7_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:bc9cc5d39f0fad0fd24ad0714105ecb52f31c89a9387e865a1165100e0b83373_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:c39f92f9cba158c2eb16c1eaffa6d7a4b68c2e688a138f9c2147f9cc734d825a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:125003cba443375c4f61b1030d81586d37a845f0b9a8d880e3fd6ae92ef8e8c2_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:6c73b4d8298e63185107e1279f71d08d7d97a222cdecb524d341c5098d6fbbea_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:7225b01e3b9833df8bb9048e520f8d8047ca0d8c3f117699558f704715cfd13e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:d79d2159d13abd614009e903dcaf6d40215fc40c1f9ab5d647a9c00a3ff254ff_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:35918880d6c322ac82cf4bf20dfb26d0955a55e905f17ab046caf012f9a9121f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3d189501a1f0fc7929c665bbd7561f32ef6f5682781f7a6e4ee3c26dcb462484_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:b4a5c1b16c96f0245e21f2475a232bb55ba7fb8e334dd9a432882553721bd677_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:dba67baef8d24128ba975366e128d12a0aa0afa2fc533ea2d7398b6e6f083198_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:65292d75a23086268ce813dfccc83c8393847db7f10d0da3e6ef4993877d34ac_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:9052b02336b088a9a479bb9f1fa3ff84d5e7fb9215f079a96a6ddf88a9a13eda_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:b07eff7a71f06807bd8b935c111b36aeb7c8641fc3d90214a2cfe8cf4991c85d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:cd651599d397959b5ee00de3546b743c67e9787a05b3ebd0596fa9ebea60d6c6_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:2b0edf1a5f77a70e865597e0da9a127149be2b157dafabf459776e57dadefa90_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:504d6b35c134931c235e84b6f63f388509ab33b0f025ae2141dbb9af00847a11_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:753cad7a66f90c15f895cbd6ab44aabd9e8ebef4c3895162c17fcda75732be20_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:8b0b8b82f4cee8fac00c277d7eb34fe5e32d2afb772e0292d23c4721d3e21c1c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:3f7d5c6c6ee4cddcb9dfdcf3c8780b51c7de4b06d790791107950bcf0a19cffb_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:41024e20e2bc15de22f604c3720ed09c35c2ac9b08e997ecd9c790e66342afc3_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:4f9924cdfba783a8e58a3a1c4610bb1ba628fa932c3ebc737c283b6861243ea6_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:733b3973b716996f4bb3f1d827e663b94fc59e5ad27db7940eef78ad76eaccd6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:3aeb56a3b6497a4636d4b9fcf213e5b9d2e257c71124c61198efc3108bf8f149_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:441e738ec559a5170ae0cd8b86831db2b2ad824c345c85948142237a4770231c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9eec6d8996c678e439d9731ffbb692a6dc0c28387e001ec49da076afd5a97f68_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:ea8a96761e6e04eea78c45415d62de94a8446155d7c3e4b3060355b3b723474f_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:d4218b683f886d65c51d5415bf83f5b7b615d688a02ae8d535e396937217aaff_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:dbd0a6207f1d649e747cd3f04c5f5003273c0a3b2eebe42497035d9bcba26b73_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:ddbaebafea2f1b8955e4f8e7c480163c16be64e9f4f69b4c6bc17d280cb5f073_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-support-log-gather-rhel9-operator@sha256:e3507d11bf68658bf042aaacb44fc1f933658225ca5795d7e591fece67c5f29d_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:2d4743707b874ee14cc61f85ca4726ca07a359b5ee2eb8d167eeb7f77c410dbc_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:709fa0527da2c67dc5d22c0eae175cb04fb668fbf2e62eef5ce19cb366b17f0a_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bd7c20fecc2051128a23875b8015c17d2eed70b22ea10ec32176544e030fdb46_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:c226ef384b70b2d6b76e047ddbaf333387bb427566f2d5e8dc146a3b496e6f75_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:52345d558afa573db5d9ebf070bf02c300515cf4f88471c208d091dc007a0ee1_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:5d3a1c93aad2b8af3926329cd5c1348acfac5805d434f074250558942e5d03f6_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:989e5509541b6851179da26c8f44e9226d8da32b2de74ce2b48c3ee8db73e2ca_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:eb3cd2fac6f8173c517831611c6d16c492d99c29c5af8c0039ba616c8b769457_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:3d1a3b24dd9914cb09572506f7ef3dd7df90b85e0edf25fa3e0cf84939773b6f_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:4be109ccb4e91dd377d8d65c28fec930674ddc71e6d0b12b4bdeaa7ba163eec4_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e500a79e82200a27864cd88b3c8102bdec159a98e23104564ac891db616086d_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:9e7460ecea28313ed0a40392b06ef9664f2c1caf4a18fc9e884bcd437ff5db1e_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:1f81d5754bc322dcaec05fd99313e9d079a68700dd383eaf88692082af6f2138_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:6f992a33fd5c1c85f2ecf4fce2f0ac57025080299d18b803cf4bbcec6b0d286e_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:dabe9524a5f3bb9a7280e45de582c9e57537020576a35e7f43aa0defe249b22a_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:f04bea41a54c62e98288d09fef2dfa6f25764e3cf6bf5dcbf75e006176023b50_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0bfc469271083f3223faa2a86b76787b298e11b19af4941ddb317544dd87453c_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:7292b86c807762d94fadfb5304fbc42768029a572448407da3fdfe85146a50b9_amd64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:dbc306aee40409511f5be6b46d77ad15ca2665d95c8466c3703a8ba864e34a58_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:3a4f9b325358bd8ad6c7d9a7e55b9f4841b95d155a4e671bbbdc2c828f64f5ee_s390x",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:b422961e5afb7965c943c2226ab549dc3f5b8466e74aae4a7e8fbc557e43c5dc_ppc64le",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c3509eb2c9939163a04ec53a240e6fdb838769ac9d057800fe2eaa0a7855b4b8_arm64",
"Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:e6721f2eefcae4a2552e77381db76aa8650e48eff5b61e36e24b44e461a9722f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
}
]
}
ubuntu-cve-2026-13676
Vulnerability from osv_ubuntu
Published
2026-06-29 14:16
Modified
2026-07-01 21:19
Summary
Details
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node's URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.
Severity
7.5 (High)
7.5 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ajv",
"binary_version": "5.0.0-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "node-ajv",
"purl": "pkg:deb/ubuntu/node-ajv@5.0.0-1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ajv",
"binary_version": "6.10.2-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "node-ajv",
"purl": "pkg:deb/ubuntu/node-ajv@6.10.2-1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.10.2-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ajv",
"binary_version": "6.12.6-3"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "node-ajv",
"purl": "pkg:deb/ubuntu/node-ajv@6.12.6-3?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.12.6-2",
"6.12.6-3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ajv",
"binary_version": "8.12.0~ds+~2.1.1-4"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "node-ajv",
"purl": "pkg:deb/ubuntu/node-ajv@8.12.0~ds+~2.1.1-4?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.12.6-3",
"8.12.0~ds+~2.1.1-4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ajv",
"binary_version": "8.12.0~ds+~2.1.1-5"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "node-ajv",
"purl": "pkg:deb/ubuntu/node-ajv@8.12.0~ds+~2.1.1-5?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.12.0~ds+~2.1.1-5"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ajv",
"binary_version": "8.17.1~ds+~3.0.1+~3.1.0-4build1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "node-ajv",
"purl": "pkg:deb/ubuntu/node-ajv@8.17.1~ds+~3.0.1+~3.1.0-4build1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.12.0~ds+~2.1.1-5",
"8.17.1~ds+~3.0.1+~3.1.0-2",
"8.17.1~ds+~3.0.1+~3.1.0-4build1"
]
}
],
"aliases": [],
"details": "fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.",
"id": "UBUNTU-CVE-2026-13676",
"modified": "2026-07-01T21:19:39Z",
"published": "2026-06-29T14:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-13676"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"type": "REPORT",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
},
{
"type": "REPORT",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"type": "REPORT",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13676.json"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-13676"
]
}
WID-SEC-W-2026-2334
Vulnerability from csaf_certbund - Published: 2026-07-14 22:00 - Updated: 2026-07-21 22:00Summary
Red Hat OpenShift Container Platform (fast-uri,OpenTelemetry-Go) : Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial-of-Service-Zustand auszulösen.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <10.4.1
Splunk / Splunk Enterprise
|
<10.4.1 | ||
|
Splunk Splunk Enterprise <10.2.5
Splunk / Splunk Enterprise
|
<10.2.5 | ||
|
Splunk Splunk Enterprise <10.0.8
Splunk / Splunk Enterprise
|
<10.0.8 | ||
|
Splunk Splunk Enterprise <9.4.13
Splunk / Splunk Enterprise
|
<9.4.13 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Red Hat OpenShift Container Platform 4.22.5
Red Hat / OpenShift
|
cpe:/a:redhat:openshift:container_platform_4.22.5
|
Container Platform 4.22.5 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <10.4.1
Splunk / Splunk Enterprise
|
<10.4.1 | ||
|
Splunk Splunk Enterprise <10.2.5
Splunk / Splunk Enterprise
|
<10.2.5 | ||
|
Splunk Splunk Enterprise <10.0.8
Splunk / Splunk Enterprise
|
<10.0.8 | ||
|
Splunk Splunk Enterprise <9.4.13
Splunk / Splunk Enterprise
|
<9.4.13 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Red Hat OpenShift Container Platform 4.22.5
Red Hat / OpenShift
|
cpe:/a:redhat:openshift:container_platform_4.22.5
|
Container Platform 4.22.5 |
References
8 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://access.redhat.com/errata/RHSA-2026:37585 | external |
| https://access.redhat.com/errata/RHSA-2026:40262 | external |
| https://access.redhat.com/errata/RHSA-2026:40118 | external |
| https://advisory.splunk.com//advisories/SVD-2026-0705 | external |
| https://access.redhat.com/errata/RHSA-2026:40945 | external |
| https://access.redhat.com/errata/RHSA-2026:43038 | external |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Red Hat OpenShift ist eine \"Platform as a Service\" (PaaS) L\u00f6sung zur Bereitstellung von Applikationen in der Cloud.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial-of-Service-Zustand auszul\u00f6sen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-2334 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2334.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-2334 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2334"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:37585 vom 2026-07-14",
"url": "https://access.redhat.com/errata/RHSA-2026:37585"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:40262 vom 2026-07-16",
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:40118 vom 2026-07-15",
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2026-0705 vom 2026-07-15",
"url": "https://advisory.splunk.com//advisories/SVD-2026-0705"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:40945 vom 2026-07-16",
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:43038 vom 2026-07-22",
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
}
],
"source_lang": "en-US",
"title": "Red Hat OpenShift Container Platform (fast-uri,OpenTelemetry-Go) : Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-07-21T22:00:00.000+00:00",
"generator": {
"date": "2026-07-22T09:20:40.787+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-2334",
"initial_release_date": "2026-07-14T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-07-14T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-07-15T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat und Splunk-SVD aufgenommen"
},
{
"date": "2026-07-21T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "Container Platform 4.22.5",
"product": {
"name": "Red Hat OpenShift Container Platform 4.22.5",
"product_id": "T056492",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform_4.22.5"
}
}
}
],
"category": "product_name",
"name": "OpenShift"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.4.1",
"product": {
"name": "Splunk Splunk Enterprise \u003c10.4.1",
"product_id": "T056665"
}
},
{
"category": "product_version",
"name": "10.4.1",
"product": {
"name": "Splunk Splunk Enterprise 10.4.1",
"product_id": "T056665-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:10.4.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c10.2.5",
"product": {
"name": "Splunk Splunk Enterprise \u003c10.2.5",
"product_id": "T056666"
}
},
{
"category": "product_version",
"name": "10.2.5",
"product": {
"name": "Splunk Splunk Enterprise 10.2.5",
"product_id": "T056666-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:10.2.5"
}
}
},
{
"category": "product_version_range",
"name": "\u003c10.0.8",
"product": {
"name": "Splunk Splunk Enterprise \u003c10.0.8",
"product_id": "T056667"
}
},
{
"category": "product_version",
"name": "10.0.8",
"product": {
"name": "Splunk Splunk Enterprise 10.0.8",
"product_id": "T056667-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:10.0.8"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.4.13",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.4.13",
"product_id": "T056668"
}
},
{
"category": "product_version",
"name": "9.4.13",
"product": {
"name": "Splunk Splunk Enterprise 9.4.13",
"product_id": "T056668-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.4.13"
}
}
}
],
"category": "product_name",
"name": "Splunk Enterprise"
}
],
"category": "vendor",
"name": "Splunk"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-13676",
"product_status": {
"known_affected": [
"T056665",
"T056666",
"T056667",
"T056668",
"67646",
"T056492"
]
},
"release_date": "2026-07-14T22:00:00.000+00:00",
"title": "CVE-2026-13676"
},
{
"cve": "CVE-2026-39882",
"product_status": {
"known_affected": [
"T056665",
"T056666",
"T056667",
"T056668",
"67646",
"T056492"
]
},
"release_date": "2026-07-14T22:00:00.000+00:00",
"title": "CVE-2026-39882"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…